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Using this Manual 



This manual shows you how to use the following emulators with the 
Softkey Interface. 

■ HP 64770A/B TLCS-9000 emulator 
This manual: 

■ Shows you how to use emulation commands by executing 
them on a sample program and describing their results. 

■ Shows you how to use the emulator in-circuit (connected to a 
target system). 

■ Shows you how to configure the emulator for your 
development needs. Topics include: restricting the emulator to 
real-time execution. 

This manual does not: 

■ Show you how to use every Softkey Interface command and 
option; the Softkey Interface is described in the Softkey 
Interface Reference manual. 

For the most part, the HP 64770A and HP 64770B emulators all 
operate the same way. Differences of between the emulators are 
described where they exist. Both the HP 64770A and HP 64770B 
emulators will be referred to as the "HP 64770A/B TLCS-9000 
emulator" or "TLCS-9000 emulator". In the specific instances where 
HP 64770B emulator differs from HP 64770A emulator, it will be 
described as "HP 64770A emulator". 



Organization 

Chapter 1 



Introduction to the TLCS-9000 Emulator. This chapter briefly 
introduces you to the concept of emulation and lists the basic features 
of the TLCS-9000 emulator. 



Chapter 2 



Chapter 3 



Chapter 4 



Chapter 5 



Getting Started. This chapter shows you how to use emulation 
commands by executing them on a sample program. This chapter 
describes the sample program and how to: load programs into the 
emulator, map memory,display and modify memory, display registers, 
step through program, run programs, set software breakpoints, search 
memory for data, and use the analyzer. 

"In-Circuit" Emulation. This chapter shows you how to install the 
emulator probe into a demo board and target system and how to use 
"in-circuit" emulation features. 



Configuring the Emulator. This chapter shows you how to: restrict 
the emulator to real-time execution, allow the target system to insert 
wait states, and select foreground or background monitor. 

Using the Emulator. This chapter describes emulation topics which 
are not covered in the "Getting Started" chapter. 



Conventions 



Example commands throughout the manual use the following 
conventions: 



bold 

bold italic 

normal 
$ 

<RETURN> 



Commands, options, and parts of command syntax. 

Commands, options, and parts of command syntax 
which may be entered by pressing softkey. 

User specified parts of a command. 

Represents the HP-UX prompt. Commands which 
foUow the "$" are entered at the HP-UX prompt. 



The carriage return key. 



Notes 
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Introduction to the TLCS-9000 Emulator 

Introduction The topics in this chapter include: 

■ Purpose of the emulator 

■ Features of the emulator 

■ Limitations and Restrictions of the emulator 



Purpose of the 
Emulator 



The TLCS-9000 emulator is designed to replace the TLCS-9000 
microprocessor series in your target system to help you debug/integrate 
target system software and hardware. The emulator performs just like 
the processor which it replaces, but at the same time, it gives you 
information about the bus cycle operation of the processor. The 
emulator gives you control over target system execution and allows you 
to view or modify the contents of processor registers, target system 
memory, and I/O resources. Refer to "Memory Mapping" section in the 
"Using the Emulator" chapter. 
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Figure 1-1 HP 64770A/B Emulator for TLCS-9000 
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Features of the 

TLCS-9000 

Emulator 



This section introduces you to the features of the emulator. The 
chapters which follow show you how to use these features. 



The HP 64770A emulator supports the microprocessors listed in Table 
1-1. The HP 64770B emulator supports the microprocessors listed in 
Table 1-2. 

1 Supported Microprocessors (HP 64770A) 



Supported 
Microprocessors 


Internal ROM size 


Internal RAM size 


TMP97C241F 


0 


2Kbyte 


TMP97PS40F 


64K byte 


2K byte 


TMP97CS40F 


64Kbyte 


2Kbyte 


TMP97CM40F 


32Kbyte 


1Kbyte 


TMP97PW40F 


128Kbyte 


4Kbyte 


TMP97CW40F 


128Kbyte 


4Kbyte 
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Supported 
Microprocessors 

Table 1- 



Table 1-2 Supported Microprocessors (HP 64770B) 



Supported 
Microprocessors 


Internal ROM size 


Internal RAM size 


TMP97CS42 


64Kbyte 


3.5Kbyte 


TMP97PU42 


64Kbyte 


3.5Kbyte 


96Kbyte 


5.25Kbyte 


TMP97CU42 


96Kbyte 


5.25Kbyte 


TMP97PW42 


128Kbyte 


5.25Kbyte 


TMP97CW42 


128Kbyte 


5.25Kbyte 



ClOCk Speeds The HP 64770A emulator runs with a target system clock from 4 to 20 
MHz. The HP 64770B emulator runs with a target system clock from 4 
to 16 MHz. 



Emulation memory The HP TLCS-9000 emulator can be used with one of the following 

Emulation Memory Modules. 

■ HP 64171A 256K byte Emulation Memory Module(35 ns) 

■ HP 64 1 7 1 B 1 M byte Emulation Memory Module(35 ns) 

■ HP 64172A 256K byte Emulation Memory Module(20 ns) 

■ HP 64172B 1M byte Emulation Memory Module(20 ns) 

■ HP 64 173 A 4M byte Emulation Memory Module(25 ns) 

You can define up to 7 memory ranges. You can characterize memory 
ranges as emulation RAM, emulation ROM, target system RAM, target 
system ROM, or guarded memory. The emulator generates an error 
message when accesses are made to guarded memory locations. You 
can also configure the emulator so that writes to memory defined as 
ROM cause emulator execution to break out of target program 
execution. Refer to the "Memory Mapping" section in the "Using the 
emulator" chapter. 



Analysis The HP 64770A emulator is used with one of the following analyzers 
which allows you to trace code execution and processor activity. 
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■ HP64704A 80-channel Emulation Bus Analyzer 

■ HP64794A/C/D Deep Emulation Bus Analyzer 

The Emulation Bus Analyzer monitors the emulation processor using 
an internal analysis bus. 

Registers You can display or modify the TLCS-9000 internal register contents. 



Emulation Monitor The emulation monitor is a program that is executed by the emulation 

processor. It allows the emulation controller to access target system 
resources, and emulation memory. For example, when you display 
target system memory, it is monitor program that executes TLCS-9000 
instructions which read the target memory locations and send their 
contents to the emulation controller. 

The emulation monitor takes up 64K bytes of processor's address space. 



Single-Step You can direct the emulation processor to execute a single instruction 
or a specified number of instructions. 

Breakpoints You can set up the emulator/analyzer interaction so that when the 
analyzer finds a specific state, emulator execution will break to the 
emulation monitor. 

You can also define software breakpoints in your program. The 
emulator uses the undefined instruction(7F9Fh) to provide software 
breakpoint. When you define a software breakpoint, the emulator 
places a this undefined instruction at the specified address; after the 
undefined instruction causes emulator execution to break out of your 
program, the emulator replaces undefined instruction with the original 
opcode. 



Reset Support The emulator can be reset from the emulation system under your 
control, or your target system can reset the emulation processor. 

Real-Time Operation Real-time operation signifies continuous execution of your program 

without interference from the emulator. (Such interference occurs when 
the emulator temporarily breaks to the monitor so that it can access 
register contents or memory.) 
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You can restrict the emulator to real-time execution. When the 
emulator is executing your program under the real-time restriction, 
commands which display/modify registers, display/modify memory are 
not allowed. 



Coverage The TLCS-9000 emulator does not support coverage test. 



Easy Products 
Upgrades 



Because the HP 64700 Series development tools (emulator, analyzer, 
LAN board) contain programmable parts, it is possible to reprogram 
the firmware and some of the hardware without disassembling the HP 
64700B Card Cage. This means that you'll be able to update product 
firmware, if desired, without having to call an HP field representative 
to your site 
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Limitations, 
Restrictions 



Reset While in 
Monitor 



If monitor program is running, RESET signal from target system is 
ignored while in monitor. 



User Interrupts While 
in Monitor 



While Executing Step 
Command 



Note 
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If the monitor is running, NMI, INT0-7(edge sense) for HP 64770A, 
IREQ for HP 64770B signals from target system are suspended until 
the emulator goes into user program operation. Other interrupts are 
ignored. 

While ste pping us er program, interrupts are ignored. While single 
stepping , BUSRQ from target system is always ignored even if 
BUSRQ from target system is enabled. 



You should not use step command in case the interrupt handler's 
punctuality is critical. 



Watch Dog Timer 
(HP 64770A Only) 



When the HP 64770A emulator breaks into the monitor, the watched 
dog timer is resets, and disabled until the emulator goes into user 
program operation. 

You must display/modify MDMOD register by "reg" command instead 
of "m" command. 



Vector Area 



You need to configure vector entry for the emulator to realize the 
following features. 

■ Break 

■ Single-Step 

■ Software Break Point 

Refer to the "Vector Area Setting" section in the "Using the Emulator" 
Chapter in this manual. 
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Register Bank 



When the emulator breaks into the monitor, the PC and PSW are stored 
at register bank of "CBP-1" in the same way as the emulator accepts 
interrupts. 



Unbreaking into the 
Monitor 



The emulator can not break into the monitor when the emulation 
processor is the following states. 



Standby Mode by HALT instruction 

Power Save state(Hardware standby mode) by PS signal 

Hold Mode b y BUSRQ signal 

Reset state by RESET signal from target 



Emulation Memory 



When you use the emulator in single chip mode, you need the 
emulation memory because the emulator maps internal ROM/RAM 
area as emulation memory. 

If you use the emulator in single chip mode or the emulation processor 
does burst fetch, the emulation memory module is restricted by clock 
speed as following. 



HP 64770A 

If clock speed is equal to 18MHz or greater 18MHz, you need 
HP64712A/B emulation memory module. If clock speed is less than 
18MHz, you can use HP64712A/B and HP64713A emulation memory 
modules. If clock speed is less than 15MHz, you can use HP64171 A/B, 
HP64172A/B and HP64713A emulation memory module. 



HP 64770B 

If clock speed is equal to 16MHz or less than 16MHz, you can use 
HP64712A/B and HP64713A emulation memory modules. If clock 
speed is less than 15MHz, you can use HP64171A/B, HP64172A/B 
and HP64713A emulation memory module. 



Evaluation Chip Hewlett-Packard makes no warranty of the problem caused by the 

TLCS-9000 Evaluation chip in the emulator. 
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Getting Started 



Introduction This chapter will lead you through a basic, step by step tutorial that 

shows how to use the HP 64770A/B emulator (for the TLCS-9000 
microprocessor) with the Softkey Interface. 

This chapter will: 

■ Tell you what must be done before you can use the emulator 
as shown in the tutorial examples. 

■ Describe the demo program used for this chapter' s examples. 
This chapter will show you how to: 

■ Start up the Softkey Interface. 

■ Load programs into emulation and target system memory. 

■ Enter emulation commands to view execution of the demo 
program. 
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Before You Begin 



Prerequisites Before beginning the tutorial presented in this chapter, you must have 
completed the following tasks: 

1. Connected the emulator to your computer. The HP 64700 
Series Installation/Service manual show you how to do this. 

2. Installed the Softkey Interface software on your computer. 
Refer to the HP 64700 Series Installation/Service manual for 
instructions on installing software. 

3. In addition, you should read and understand the concepts of 
emulation presented in the Concepts of Emulation and 
Analysis manual. The Installation/Service manual also covers 
HP 64700 system architecture. A brief understanding of these 
concepts may help avoid questions later. 

You should read the Softkey Interface Reference manual to 
learn how to use the Softkey Interface in general. For the 
most part, this manual contains information specific to the 
TLCS-9000 emulator. 

A Look at the Demo The demo program is spmt_demo consisting of source program 
Program spmt_demo.c and init.s. 

Where is the spmt_demo Software? 

The demo program is shipped with the Softkey Interface and may be 
copied from the following directory. 

/usr/hp64000/demo/emul/hp64770 
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Assembling/Compiling 
the Demo Program 



The demo program is written for and compiled/linked with the 
MICROTEC RESEARCH Inc. MCCT9K C Compiler Package. The 
demo program was assembled/compiled with the following commands. 



$ mcct9k -c -g spmt_demo . c <RETURN> 
$ asmt9k -f debug, casemcct9k -1 init . 
init.lis <RETURN> 



s > 



Linking the Demo 
Program 



The following command was used to generate the absolute file. The 
"spmt_demo.cmd" linker command file is shown in figure 2-1. 



DEBUG_SYMBOLS 
SECT stack=$400 
SECT zerovars=$800 
SECT code=$a00 
LOAD init.o 
LOAD spmt_demo . o 
END 



$ lnkt9k -c spmt_demo.cmd -M<RETURN> 



Figure 2-1 Linker Command File 



Entering the 
Soft key Interface 



If you have installed your emulator and Softkey Interface software as 
directed in the HP 64700 Series Emulators Softkey Interface 
Installation Notice, you are ready to enter the interface. The Softkey 
Interface can be entered from the HP-UX shell. 



From the HP-UX Shell If /usr/hp64000/bin is specified in your PATH environment variable, 

you can also enter the Softkey Interface with the following command. 

$ emul700 <emul_name> <RETURN> 

The "emul_name" in the command above is the logical emulator name 
given in the HP 64700 emulator device table 
(/usr/hp64000/etc/64700tab.net). 

# + + + 

# Channel | Logical | Processor | Remainder of Information for the Channel 

# Type I Name I Type I (IP address for LAN connections) 

# + + + 

lan: tics t9k40 21.17.9.143 



If this command is successful, you will see a display similar to figure 
2-2. The status message shows that the default configuration file has 
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been loaded. If the command is not successful, you will be given an 
error message and returned to the HP-UX prompt. Error messages are 
described in the Softkey Interface Reference manual. 



HPB3075-11001 A. 05. 20 10Jan95 

TLCS-9000/40 SOFTKEY USER INTERFACE 

A Hewlett-Packard Software Product 
Copyright Hewlett-Packard Co. 1993 

All Rights Reserved. Reproduction, adaptation, or translation without prior 
written permission is prohibited, except as allowed under copyright laws. 

RESTRICTED RIGHTS LEGEND 

Use , duplication , or disclosure by the Government is subject to 
restrictions as set forth in subparagraph (c) (1) (II) of the Rights 
in Technical Data and Computer Software clause at DFARS 52.227-7013. 
HEWLETT-PACKARD Company , 3000 Hanover St. , Palo Alto, CA 94304-1181 

STATUS: Starting new session ...R.... 

run trace step display modify break end ETC — 



Figure 2-2 Softkey Interface Display 

To do operations described in this chapter (loading absolute program 
into emulation memory, displaying memory contents, etc), you need to 
configure the emulator as below. For detailed description of each 
configuration option (question), refer to the "Configuring the 
Emulator" chapter. 

To get into the configuration session of the emulator, enter the 
following command. 

modify configuration <RETURN> 

Answer to the series of questions as below. 

Restrict to real-time runs? no <RETURN> 

When you use HP 64770A emulator, answer this question as shown. 

Processor type? 97CM40 <RETURN> 

When you use HP 64770B emulator, answer this question as shown. 

Processor type? 97CU42 <RETURN> 



Configure the 
Emulator for 
Examples 
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Processor operation mode? external_bus <RETURN> 
Monitor base address? OFOOOOH <RETURN> 
Enable emulation VBP? yes <RETURN> 

When you use HP 64770A emulator, answer this question as shown. 

Vector base address (97PS/CM40)? OFFOOOOH <RETURN> 

When you use HP 64770B emulator, answer this question as shown. 

Vector base address (97CU42)? 0FE7800H <RETURN> 

Initial CBP value? 01H <RETURN> 

Modify memory configuration? yes <RETURN> 

Now you should be facing memory mapping screen. If you use HP 
64770A emulator, two mapper terms must be specified for the demo 
program. Enter the following lines to map the program code area as 
emulation ROM, data area as emulation RAM. If you use HP 64770B 
emulator, you do not need to map because mapper terms for the demo 
program are specified automatically. 

400h thru 9ffh emulation ram <RETURN> 

OaOOh thru Offfh emulation rom <RETURN> 

end <RETURN> 
Modify emulator pod configuration? no <RETURN> 
Modify debug/trace options? no <RETURN> 
Modify simulated I/O configuration? no <RETURN> 
Modify interactive measurement specification? no <RETURN> 

If you wish to save the configuration specified above, answer this 
question as shown. 

Configuration file name? spmt_demo <RETURN> 

Now you are ready to go ahead. Above configuration is used through 
out this chapter. 



Getting Started 2-5 



On-Line Help There are two ways to access on-line help in the Softkey Interface. The 

first is by using the Softkey Interface help facility. The second method 
allows you to access the firmware resident Terminal Interface on-line 
help information. 

Softkey Driven Help To access the Softkey Interface on-line help information, type either 

"help" or "?" on the command line; you will notice a new set of 
softkeys. By pressing one of these softkeys and <RETURN>, you can 
cause information on that topic to be displayed on your screen. For 
example, you can enter the following command to access "system 
command" help information. 



? system_commands <RETURN> 



SYSTEM COMMANDS S 


COMMAND FILES 


9 

help 


displays the possible help files 
displays the possible help files 


i 

!<shell command> 


fork a shell {specified by shell variable SH) 
fork a shell and execute a shell command 


pwd 

cd <directory> 


print the working directory 
change the working directory 


pws 

cws <SYMB> 


print the default symbol scope 

change the working symbol - the working symbol also 
gets updated when displaying local symbols and 
displaying memory mnemonic 


forward <UI> "command 


" send the command in the quoted string from this user 
interface to another one. Replace <UI> with the name 
of the other user interface as shown on the softkeys: 


--More-- (15%) 





The help information is scrolled on to the screen. If there is more than 
a screenful of information, you will have to press the space bar to see 
the next screenful, or the <RETURN> key to see the next line, just as 
you do with the HP-UX more command. After all the information on 
the particular topic has been displayed (or after you press "q" to quit 
scrolling through information), you are prompted to press <RETURN> 
to return to the Softkey Interface. 



2-6 Getting Started 



Pod Command Help To access the emulator's firmware resident Terminal Interface help 

information, you can use the following commands. 

display pod_command <RETURN> 

pod_command 'help cf' <RETURN> 

Pod Commands 

Time Command 

cf <item> <item>=<value> <item> - set and display can be combined 

help cf <item> - display long help for specified <item> 



- VALID 


CONFIGURATION <item> NAMES 




breq 


- en/dis /BUSRQ input from target 


system 


cbp 


- CBP value on break from reset state 


emvbp 


- en/dis emulation VBP 




int 


- en/dis interrupts 




loc 


- specify monitor location 




mode 


- select operation mode 




proc 


- select processor type 




rrt 


- en/dis restriction to real time 


runs 


trst 


- en/dis /RESET input from target 


system 


vector 


- specify vector address 




wdt 


- en/dis watch dog timer on break 


from reset state 



STATUS: T9K40 — Emulation reset ...R.... 

pod_command 'help cf 

run trace step display modify break end ETC — 



The command enclosed in string delimiters (", ', or A ) is any Terminal 
Interface command, and the output of that command is seen in the 
pod_command display. The Terminal Interface help (or ?) command 
may be used to provide information on any Terminal Interface 
command or any of the emulator configuration options (as the example 
command above shows). 



4 



Note Mil If you want to use the Terminal Interface command by entering from 

keyboard directly, you can do it after entering the following command. 
pod_command k&yboard 
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Loading Absolute 
Files 



The "load" command allows you to load absolute files into emulation 
or target system memory. You can load absolute files in the following 
formats: 



■ IEEE-695 

■ HP absolute(No symbols) 

The "load" command has no special options for loading different 
absolute file formats; instead, the contents of the file are examined to 
determine the format being used. If you wish to load only that portion 
of the absolute file that resides in memory mapped as emulation RAM 
or ROM, use the "load emul_mem" syntax. If you wish to load only 
the portion of the absolute file that resides in memory mapped as target 
RAM, use the "load user_mem" syntax. If you want both emulation 
and target memory to be loaded, do not specify "emul_mem" or 
"user_mem". For example: 

load spmt_demo <RETURN> 



4 



Note Ma When you use HP 64770B emulator, you must enter "break" command 

before you load a program. Enter the following command, 
break <RETURN> 
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When loading a program if the status line shows 

"ERROR: No absolute file, No database: 

spmt_demo 

, you may NOT be in the directory that your program is in. To find out 
what directory you are in, enter: 

! pwd <RETURN> 
The "!" allows you to use an HP-UX shell command. To move into 
the correct directory, enter: 

cd <directory path> <RETURN> 



You can also specify the pathname where your program resides. For 
example, you could enter: 

load 

/ u s r / hp 64 000/ demo / emu 1 / hp 6 4 7 7 0 / spmt_demo 
<RETURN> 
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Displaying 
Symbols 



When you load an absolute file into memory (unless you use the 
"nosymbols" syntax), symbol information is also loaded. Both global 
symbols and symbols that are local to a source file can be displayed. 



G lobal To display global symbols, enter the following command. 

display global_symbols <RETURN> 

Listed are address ranges associated with a symbol, the segment that 
the symbol is associated with, and the offset of that symbol within the 
segment. 



Global symbols in spmt_demo . x 
Procedure symbols 



Procedure name 


Address 


range 


Segment 


Offset 


apply_cont roller 


000DBC - 


000E0B 


code 


0396 


apply_product ions 


OOOCCO - 


000D13 


code 


029A 


calculate_answer 


000E0C - 


000E53 


code 


03E6 


clear_buf f er 


000BEC - 


000C1B 


code 


01C6 


endcommand 


000EFA - 


000F05 


code 


04D4 


f ormat_result 


000D14 - 


000D43 


code 


02EE 


get_next_token 


000D80 - 


000DBB 


code 


035A 


initialze 


000D44 - 


000D7F 


code 


031E 


input_line 


000A26 - 


000A57 


code 


0000 


lookup_token 


000C1C - 


000C55 


code 


01F6 


main 


000F06 - 


000F6B 


code 


04E0 


math_library 


000B38 - 


000BAD 


code 


0112 


move_byte 


000A58 - 


000A83 


code 


0032 


outputline 


000BAE - 


000BEB 


code 


0188 


parse_command 


000E84 - 


000EBD 


code 


045E 


STATUS : T9K40 — Emulation 


reset 






. . . R . . . 



display global_symbols 



run trace step display modify break end ETC — 
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Local When displaying local symbols, you must include the name of the 
source file in which the symbols are defined. For example, 

display local_symbols_in spmt_demo . c : 
<RETURN> 

As you can see, the procedure symbols and static symbols in 
"spmt_demo.c" are displayed. 

To list the next symbols, press the <PGDN> or <Next> key. the source 
reference symbols in "spmt_demo.c" will be displayed. 

Listed are: address ranges associated with a symbol, the segment that 
the symbol is associated with, and the offset of that symbol within the 
segment. 



Symbols in spmt_demo (module) 
Procedure symbols 



Procedure name 


Address 


range 


Segment 


Offset 


apply_cont roller 


000DBC - 


000E0B 


code 


0396 


apply_product ions 


OOOCCO - 


000D13 


code 


029A 


calculate_answer 


000E0C - 


000E53 


code 


03E6 


clear_buf f er 


000BEC - 


000C1B 


code 


01C6 


endcommand 


000EFA - 


000F05 


code 


04D4 


f ormat_result 


000D14 - 


000D43 


code 


02EE 


get_next_token 


000D80 - 


000DBB 


code 


035A 


initialze 


000D44 - 


000D7F 


code 


031E 


input_line 


000A26 - 


000A57 


code 


0000 


lookup_token 


000C1C - 


000C55 


code 


01F6 


main 


000F06 - 


000F6B 


code 


04E0 


math_library 


000B38 - 


000BAD 


code 


0112 


move_byte 


000A58 - 


000A83 


code 


0032 


outputline 


000BAE - 


000BEB 


code 


0188 


parse_command 


000E84 - 


000EBD 


code 


045E 


STATUS : cws : spmt demo 








. . . R . . . 


display local_symbols_in 


spmt_demo . c : 









run trace step display modify break end ETC — 
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Source Lines To display the address ranges associated with the program's source 
you must display the local symbols in the file. For example: 

display local_symbols_in spmt_demo . c : 
<RETURN> 

And scroll the information down on the display with up arrow,or 
<Next> key. 



Symbols in spmt_demo (module ) . " 


spmt_demo . 


c " : 






Source reference symbols 










Line range 


Address 


range 


Segment 


Offset 


#l-#35 


000A26 - 


000A27 


code 


0000 


#36-#37 


000A28 - 


000A29 


code 


0002 


#37-#37 


000A50 - 


000A53 


code 


002A 


#37-#37 


000A4E - 


000A4F 


code 


0028 


#38-#39 


000A2A - 


000A2F 


code 


0004 


#40-#40 


000A30 - 


000A35 


code 


000A 


#41-#41 


000A36 - 


000A3B 


code 


0010 


#42-#42 


000A3C - 


000A41 


code 


0016 


#43-#43 


000A42 - 


000A47 


code 


001C 


#44-#44 


000A48 - 


000A4D 


code 


0022 


#45-#46 


000A54 - 


000A57 


code 


002E 


#47-#49 


000A58 - 


000A59 


code 


0032 


#50-#51 


000A5A - 


000A5B 


code 


0034 


#51-#51 


000A70 - 


000A73 


code 


004A 


#51-#51 


000A6E - 


000A6F 


code 


0048 


STATUS: cws : spmt_demo . " spmt 


demo . c" : 






. . . R . . . 



display local_symbols_in spmt_demo.c: 



run trace step display modify break end ETC — 
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Displaying 
Memory in 
Mnemonic Format 



You can display, in mnemonic format, the absolute code in memory. 
For example to display the memory of the demo program, 



display memory main mnemonic <RETURN> 



Memory :mnemonic : f ile = spmt_demo (module ) . " spmt_demo . c " : 



address 


data 




000F06 


04A1 


PUSH.W RW4 


000F08 


518E 


LD.W:S RW4, 1 


000F0A 


00D060AB00 


CLR.W (000800) 


000F10 


00D05420 


JR 000F64 


000F14 


413F 


CALR 000E54 


000F16 


6F3F 


CALR 000E84 


000F18 


00D08AB900 


LD.W:A RW10, (000 800) 


000F1E 


OAF 3 


EXTS.D RD10 


000F20 


05 870AAF 


DIVS.W:G RW10, 05 


000F24 


BB88 


LD.W:S RW10,RW11 


000F26 


A186 


ADD.W:S RW10, 1 


000F28 


00D80AB992 


LD.W:A (000992) , RW10 


000F2E 


00D802BF92 


CP.W:A (000992), 2 


000F34 


00D00A18 


JRC LE,000F3E 


000F38 


00D803BF92 


LD.W:A (000992), 3 


000F3E 


00D060A192 


PUSH.W (000992) 



STATUS: cws : spmt_demo . " spmt_demo . c " : ...R.... 

display memory main mnemonic 

run trace step display modify break end ETC — 



Notice that you can use symbols when specifying expressions. The 
global symbol main is used in the command above to specify the 
starting address of the memory to be displayed. 
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Display Memory with 
Symbols 



If you want to see symbol information with displaying memory in 
mnemonic format, the emulator Softkey Interface provides "set 
symbols" command. To see symbol information, enter the following 
command. 

set symbols on <RETURN> 



Memory :mnemonic :file 



address 
000F06 
000F08 
000F0A 
000F10 
000F14 
000F16 
000F18 
000F1E 
000F20 
000F24 
000F26 
000F28 
000F2E 
000F34 
000F38 
000F3E 



label 
spmt_de . 



= spmt_demo 

data 
04A1 
518E 

00D060AB00 
00D05420 
413F 
6F3F 

00D08AB900 
OAF 3 

05 870AAF 

BB88 

A186 

00D80AB992 

00D802BF92 

00D00A18 

00D803BF92 

00D060A192 



(module) . " spmt_demo . c " 



STATUS: T9K40 — Emulation reset 

set symbols on 

run trace step display 



PUSH.W 
LD.W:S 
CLR.W ( 
JR code 
CALR 
CALR sp 
LD.W:A 
EXTS .D 
DIVS.W 
LD.W:S 
ADD.W:S 
LD.W:A 
CP . W : A 
JRC LE, 
LD.W:A 
PUSH.W 



RW4 
RW4, 1 
zerova 
main+ 
equest. 
parse. 



stack_end) 
0005E 
command 
command 
RW10, ( zerova I stack_end) 
RD10 

G RW10, 0 5 
RW10, RW11 
RW10, 1 

(zerovars I _count ) , RW10 
(zerovars I _count ) , 2 
code I main+000038 
(zerovars |_count) , 3 
(zerovars |_count) 



modify break 



end 



-ETC- 



As you can see, the memory display shows symbol information. 
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Display Memory With If you want to reference the source line information with displaying 

Source Code memory in mnemonic format, the emulator Softkey Interface provides 
"set source" command. To reference the source line information in 
inverse video, enter the following command: 

set source on inverse_video on <RETURN> 



Memory : 


mnemonic : f ile = spmt_demo (module )." spmt_demo . c " : 




C1<_£U J_ COO 


-L CLU '..J- Ua La 




371 






372 


^kkkkkkkkkkkkkkkkkkkk J^clln prOCJCSIIl kkkkkkkkkkkkkkkkkkkk j 




373 




374 


main { ) 




375 


{ 




000F06 


spmt_de.main 04A1 PUSH.W RW4 




376 


int dummy v; 




377 


dummyv = 1 ; 




000F08 


518E LD.W:S RW4 , 1 




378 


tasknumber = 0; 




000F0A 


00D060AB00 CLR.W ( zerova I stack_end) 




000F10 


00D05420 JR code | main+00005E 




380 


{ 




381 


request_command ( ) ; 




000F14 


413F CALR . request_command 




382 


parse_command ( ) ; 




STATUS : 


T9K40 — Emulation reset 


... R ... . 


set source 


on inverse_video on 




run 


trace step display modify break end 


ETC — 



To see the memory without source line referencing, enter the following 
command: 

set source off <RETURN> 
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Running the 
Program 



The "ran" command lets you execute a program in memory. Entering 
the "run" command by itself causes the emulator to begin executing at 
the current program counter address. The "run from" command allows 
you to specify an address at which execution is to start. 



From Transfer 
Address 



The "ran from transfer_address" command specifies that the emulator 
start executing at a previously defined 

"start address". Transfer addresses are defined in assembly language 
source files with the END assembler directive (i.e., pseudo instruction). 
Enter: 

run from transfer address <RETURN> 



From Reset 



The "ran from reset" command specifies that the emulator begin 
executing from reset vector as actual microprocessor does. 

(See "Running From Reset" section in the "In-Circuit Emulation" 
chapter). 



Displaying 
Memory 



The demo program "spmt_demo.c" alters memory. 



Using Symbolic In the following display, the memory range is displayed using symbolic 
Addresses addresses data. 



The memory display window is periodically updated. For example, 
enter the following command: 

display memory data thru +7fh blocked bytes 

<RETURN> 

This command string is used to specify the range of memory from data 
to data+7fh. 
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Memory : bytes 


: access=bytes 


: blocked 


update 












address 


data 


: hex 












: ascii 




000990-97 


07 


00 


03 


00 


FF 


49 


03 


00 




.1 




000998-9F 


BF 


55 


FB 


86 


FF 


El 


FF 


FE 


. U 






UUU 7AU A / 


BF 


7E 


FD 


7C 


FF 




FF 


o Jr5 








000 9A8-AF 


FF 


F4 


FF 


EF 


FF 


D7 


FB 


CD 




! ! '. '. 




0009B0-B7 


F7 


79 


FF 


AB 


FF 


66 


FF 


OF 


• y 






0009B8-BF 


FF 


75 


F7 


4F 


FF 


E6 


FF 


FF 


. u 


.0 . . 




0009C0-C7 


FF 


6C 


FF 


7F 


FF 


7F 


FF 


ED 


. 1 






0009C8-CF 


FF 


F4 


BF 


F7 


DF 


E8 


FF 


CF 








0009D0-D7 


FF 


ED 


FF 


7F 


FF 


7E 


FD 


D9 








0009D8-DF 


FF 


EC 


FF 


65 


FF 


FC 


FF 


29 




. e . . 




0009E0-E7 


FF 


FE 


F7 


A7 


FF 


FF 


FF 


IF 








0009E8-EF 


FF 


C6 


F7 


FF 


FF 


CE 


FF 


BF 








0009F0-F7 


FF 


DO 


FF 


CF 


FF 


EC 


FF 


FF 








0009F8-FF 


FF 


El 


FF 


3F 


FF 


EA 


FF 


EF 




? 




000A00-07 


31 


OB 


00 


08 


00 


00 


39 


0B 


1 . 






000A08-0F 


00 


08 


00 


00 


FF 


DF 


00 


7F 








STATUS: T9K40 


— Running 


user 


program 












. .R. . . . 


display memory 


data 


thru 


+ 7fh 


blocked bytes 












run trace 




step 


display 




modify 


break 




end 


-ETC — 



You can use the modify memory command to send commands to the 
sample program. Memory locations stackarea and stackarea+lOh 
correspond to memory address 804 hex and 814 hex respectively. For 
example, to enter the '10h' at address 804 and enter 'A' at address 814 
: use the following commands. 

display memory stackarea <RETURN> 
modify memory stackarea to lOh <RETURN> 
modify memory stackarea+lOh string to 'A' 

<RETURN> 

After the memory location are modified, the memory display shows 
the following 



Modifying Memory 
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Memory 


: bytes 


: access=bytes 


:blocked : 


update 












address 


data 


: hex 










: asc: 


_i 




000 


304-OB 


10 


AE 


FF 


67 


FE 


97 


FF 


5F 


• g 






000 


30C-13 


FF 


AA 


FF 


E7 


FF 


E6 


FF 


OF 








000 


314-1B 


41 


5E 


FF 


5B 


FF 


FA 


FF 


DF A ' 


L 






000 


31C-23 


F7 


E3 


FF 


BF 


F7 


31 


FD 


FF 




1 




000 


324-2B 


FE 


AB 


FF 


5B 


FD 


5F 


FF 


E9 


■ [ 






000 


32C-33 


FF 


Fl 


FB 


IF 


FF 


79 


FF 


ED 




y 




000 


334-3B 


FF 


7E 


FD 


5F 


FF 


72 


FF 


6D . - 


" - 


r 


. m 


000 


33C-43 


FF 


F2 


FF 


CE 


FF 


E6 


F7 


EF 








000 


J44-4B 


FF 


AB 


FF 


BC 


FF 


A3 


FF 


AF 








000 


34C-53 


FF 


F8 


FF 


62 


FF 


FA 


FF 


FF 


. b 






000 


354-5B 


FF 


FA 


FF 


ED 


FF 


F5 


FE 


7B 






. i 


000 


35C-63 


FF 


F6 


F5 


BC 


FF 


F0 


FF 


E3 








000 


364-6B 


FF 


FA 


FE 


7B 


FF 


B8 


7B 


07 


■ { 






000 


36C-73 


FF 


7F 


FF 


7E 


FF 


FF 


FF 


FE 








000 


374-7B 


FF 


Bl 


FE 


FE 


FF 


F9 


FF 


B9 








000 


37C-83 


FF 


AB 


FF 


FF 


FF 


F8 


BF 


7E 








STATUS : 


T9K40- 


-Running 


user 


program 












. .R. . . . 


modify memory stackarea+lOH string 


to 'A' 












run 


trace 




step 


display 




modify 


break 


end 




-ETC — 



The "break" command allows you to divert emulator execution from 
the user program to the monitor. You can continue user program 
execution with the "run" command. To break emulator execution from 
the demo program to the monitor, enter the following command. 

break < RET URN > 

Notice that the current address is pointed out with inverse video in 
displaying memory when the execution breaks to the monitor. 



Breaking into the 
Monitor 
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Using Software 
Breakpoints 



Software breakpoints are handled by the TLCS-9000 undefined 
instruction (breakpoint interrupt instruction:7F9Fh). When you define 
or enable a software breakpoint, the emulator will replace the opcode at 
the software breakpoint address with a breakpoint interrupt instruction. 



« 



Caution WKk Software breakpoints should not be set, cleared, enabled, or disabled 

while the emulator is running user code. If any of these commands are 
entered while the emulator is running user code and the emulator is 
executing code in the area where the breakpoint is being modified, 
program execution may be unreliable. 



4 



Note H£K You must only set software breakpoints at memory locations which 

contain instruction opcodes (not operands or data). If a software 
breakpoint is set at a memory location which is not an instruction 
opcode, the software breakpoint instruction will never be executed. 
Further, your program won't work correctly. 



Note 




NMI will be ignored, when software breakpoint and NMI occur at the 
same time. 



4 



Note Mm Because software breakpoints are implemented by replacing opcodes 

with the breakpoint interrupt instruction, you cannot define software 
breakpoints in target ROM. Them you can use software breakpoints. 
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When software breakpoints are enabled and the emulator detects the 
breakpoint interrupt instruction, it generates a break into the monitor. 
Since the system controller knows the locations of defined software 
breakpoints, it can determine whether the breakpoint instruction in your 
target program. 

If the breakpoint interrupt was generated by a software breakpoint, 
execution breaks to the monitor, and the breakpoint interrupt 
instruction is replaced by original opcode. A subsequent run or step 
command will execute from this address. 

If the breakpoint interrupt was generated by a undefined 
instruction(7F9Fh) in the target program, execution still breaks to the 
monitor, and an "undefined breakpoint" status message is displayed. To 
continue program execution, you must run or step from the target 
program's breakpoint interrupt vector address. 



Enabling/Disabling When you initially enter the Softkey Interface, software breakpoints are 
Software Breakpoints disabled. To enable the software breakpoints feature, enter the 

following command. 

modify software_breakpoints enable <RETURN> 

When software breakpoints are enabled and you set a software 
breakpoint, the TLCS-9000 breakpoint interrupt instruction (7F9Fh) 
will be placed at the address specified. When the breakpoint interrupt 
instruction is executed, program execution will break into the monitor. 



Setting a Software To set a software breakpoint at line 80 of "spmt_demo.c", enter the 
Breakpoint following command. 

modify software_breakpoints set line 80 
<RETURN> 

To see the address where the software breakpoint has been set, enter the 
following command: 

display memory line 80 mnemonic <RETURN> 
set source on inverse_video on <RETURN> 
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Memory : mnemonic 


file = spmt_demo (module )." spmt_demo . c " : 




address label 


data 






80 


dat a — 1 } 






* 000ABC 


9F7F 


illegal opcode 




000ABE 


01BF9069 


J_iJJ.Vv.rt ^ZtJJlOVciJ-CJ | ClcLT". d. ) f ± 




81 


stack = 0 






000AC2 


00D060AB96 


CLR.W ( z s it ovci it s | stcick.) 




77.26 


for (i = 0; i 8; 


i++) 




000AC8 


4186 


ADD.W:S RW4,1 




77 .19 


for (i = 0; i 8; 


i++) 




0 0 0ACA 


04020800 


CP.W:I RW4,000 8 




000ACE 
82 


E81B 


JRC LT, cod | scan_number+000004 




83 


} 

pre_fetch = 0; 






000AD0 


00D060AB8E 


CLR.W {zerov _pre_fetch) 




84 


pre_fetch = 1; 






000AD6 

85 } 


00D801BF8E 


LD.W:A ( zerov | _pre_f etch) , 1 




STATUS: T9K40 — Running in monitor 




... R ... . 


display memory line 


80 mnemonic 






run trace 


step display 


modify break end 


ETC — 



The asterisk (*) in left side of the address lists points out that the 
software breakpoint has been set. The opcode at the software 
breakpoint address was replaced to the software breakpoint instruction. 

Displaying Software To display software breakpoints, enter the following command. 

Breakpoints 

display softwar&_br&akpoints <RETURN> 
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Software breakpoints 
address 1 
000ABC s 



s : enabled 
label 

spmt_demo (module ) . " spmt_demo . c 



line 



status 
80 pending 



STATUS : T9K40 — Running in monitor 



. . .R. . . . 



display software_breakpoints 



run 



trace 



step 



display 



modify 



break 



end 



ETC — 



The software breakpoints display shows that the breakpoint is pending. 
When breakpoints are hit they become inactivated. To reactivate the 
breakpoint so that is "pending", you must re-enter the "modify 
software_breakpoints set" command. 

After the software breakpoint has been set, enter the following 
command to cause the emulator to continue executing the demo 
program. 

run < RET URN > 
A message on the status line shows that the software breakpoint has 
been hit. The status line also shows that the emulator is now executing 
in the monitor. 

The software breakpoint address is pointed out with inverse video in 
displaying memory in mnemonic format. To see the software 
breakpoint with memory, enter the following command. 

display memory line 80 mnemonic <RETURN> 

Notice that the original opcode was replaced at the address that the 
software breakpoint has been set. 
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Clearing a Software 
Breakpoint 



To remove software breakpoint defined above, enter the following 
command. 



modify software_breakpoints clear line 80 
<RETURN> 

The breakpoint is removed from the list, and the original opcode is 
restored if the breakpoint was pending. 

To clear all software breakpoints, you can enter the following 
command. 

modify software_breakpoints clear <RETURN> 



Displaying 
Registers 



Enter the following command to display registers. You can display the 
basic registers, or an individual register. Refer to "REGISTER CLASS 
and NAME" section in "Using the Emulator" chapter . 

display registers <RETURN> 



Registers 
Next_PC 0 0 0ABC 

PC 000ABC CBP 01 PBP 00 PSW 00000808 [ <b0>P <m0>z ] 
RW0 0000 RW1 0000 RW2 0000 RW3 0000 RW4 0000 RW5 0000 
RW6 0000 RW7 0000 RW8 0000 RW9 0000 RW10 0002 RW11 0001 
RW12 0003 RW13 0000 RW14 0000 RW15 0000 
ISP 000007E8 USP 00000000 FP 00000000 



STATUS: T9K40 — Running in monitor 
display registers 



Software break: 0000abc_ 



trace 



step display 



modify break 



end 



-ETC- 
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Stepping Through 
the Program 



The step command allows you to step through program execution an 
instruction or a number of instructions at a time. Also, you can step 
from the current program counter or from a specific address. To step 
through the example program from the address of the software 
breakpoint set earlier, enter the following command. 

step <RETURN>, <RETURN>, <RETURN>, . . . 

You will see the inverse-video moves according to the step execution. 
You can continue to step through the program just by pressing the 
<RETURN> key. 



Registers 

Next_PC 0 0 0ABC 
PC 000ABC CBP 01 PBP 00 PSW 00000808 [ 
RW0 0000 RW1 0000 RW2 0000 RW3 0000 
RW6 0000 RW7 0000 RW8 0000 RW9 0000 
RW12 0003 RW13 0000 RW14 0000 RW15 0000 
ISP 000007E8 USP 00000000 FP 00000000 

Step_PC 000ABC LD.W:A ( zerovars I _data ) , 1 

Next_PC 000AC2 
PC 000AC2 CBP 01 PBP 00 PSW 00000808 [ 
RW0 0000 RW1 0000 RW2 0000 RW3 0000 
RW6 0000 RW7 0000 RW8 0000 RW9 0000 
RW12 0003 RW13 0000 RW14 0000 RW15 0000 
ISP 000007E8 USP 00000000 FP 00000000 



STATUS : 
step 



T9K40 — Stepping complete. 



<b0>P <m0>z ] 
RW4 0000 RW5 0000 
RW10 0002 RW11 0001 



<b0>P <m0>z ] 
RW4 0000 RW5 0000 
RW10 0002 RW11 0001 



trace 



step display 



modify break 



end 



-ETC- 



You can step program execution by source lines, enter: 
step source <RETURN> 

Source line stepping is implemented by single stepping assembly 
instructions until the next PC is outside of the address range of the 
current source line. When source line stepping is attempted on 
assembly code, stepping will complete when a source line is found. To 
terminate stepping type <Ctrl>-C. 
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Using the Analyzer 



HP 64700 emulators contain an emulation analyzer. The emulation 
analyzer monitors the internal emulation lines (address, data, and 
status). 



Source Line 
Referencing 



Specifying a Simple 
Trigger 



A trace may be taken and displayed using source line referencing. 
Also, lines of the source program can be displayed with the trace list 
where the trace occurred. 

To display the trace with source code in inverse video, enter the 
following command: 

set source on inverse_video on <RETURN> 

Suppose you want you trace program execution after the point at 
address semantic_check. The following command make this trace 
specification. 

trace after semantic_check <RETURN> 

The STATUS message shows "Emulation trace started.". 

Enter the following command to cause sample program execution to 
continue from the current program counter. 

run < RET URN > 



The STATUS message shows "Emulation trace complete.". 
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Display the Trace The trace listings which following are of program execution on the 

TLCS-9000 emulator. To see the trace list, enter the following 
command: 



display trace <RETURN> 



Trace 


List Depth=8192 


Offset 


= 0 






Label : 


Address 


Data 


Opcode 


or Status w/ Source Lines 


time count 


Base : 


symbols 


hex 




mnemonic w/symbols 


relative 




##########spmt demo 


.c - line 


200 


####################################### 


after 


} 

=syntax_ch+0 0 0 02C 


A104 


INSTRUCTION — opcode unavailable 




+ 001 


s . semantic_check 


A104 


A104 


fetch 


220 nS 


+ 002 


st I init . S+0003E8 


0000 


0000 


read mem word 


240 nS 


+ 003 


=syntax_ch+0 0002E 


ABO 4 


INSTRUCTION — opcode unavailable 


40 . nS 


+ 004 


semantic_+000002 


ABO 4 


ABO 4 


fetch 


220 nS 


+ 005 


st I init . S+0003EA 


0DD6 


0DD6 


read mem word 


240 nS 


+ 006 


st I init . S+0003EC 


0000 


0000 


read mem word 


260 nS 


+ 007 


apply con+OOOOlA 


8641 


8641 


fetch 


240 nS 




##########spmt_demo 


.c - line 


292 


####################################### 




for (i = 0; 


i 1*3; i++) 






+ 008 


=apply_con+00001A 


8E43 


ADD.W:S 


RW4, 1 


40 . nS 


+ 009 


apply con+OOOOlC 


8E43 


8E43 


fetch 


200 nS 




##########spmt demo 


.c - line 


292 


####################################### 


STATUS 


: T9K40 — Running user program 


Emulation trace complete 


... R ... . 


display trace 










run 


trace step 


display 




modify break end 


ETC — 



The trace list shows the trace after line 
(semantic_check()). 

To list the next lines of the trace, press the <PGDN> or <NEXT> key. 
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Displaying Trace With The trace listing shown above has symbol information because of the 
No Symbol se *- symbols on" setting before in this chapter. To see the trace listing 
with no symbol information, enter the following command. 

set symbols off <RETURN> 



Trace List Depth=8192 
Label: Address Data 
Base: hex hex 

##########spmt_demo. 

} 



Of f set=0 

Opcode or Status w/ Source Lines time count 

mnemonic relative 
c - line 200 ####################################### 



after = 


000C82 


A104 


INSTRUCTION — opcode unavailable 






+ 001 


000C86 


A104 


A104 


fetch 


220 


nS 


+ 002 


0007E8 


0000 


0000 


read mem word 


240 


nS 


+ 003 = 


000C84 


ABO 4 


INSTRUCTION — opcode unavailable 


40. 


nS 


+ 004 


000C88 


ABO 4 


ABO 4 


fetch 


220 


nS 


+ 005 


0007EA 


0DD6 


0DD6 


read mem word 


240 


nS 


+ 006 


0007EC 


0000 


0000 


read mem word 


260 


nS 


+ 007 


000DD6 


8641 


8641 


fetch 


240 


nS 



##########spmt_demo. 

for (i = 0; 
+008 = 000DD6 8E43 
+009 000DD8 8E43 

##########spmt_demo. 



c - line 292 
i 1*3; i++) 
ADD.W:S RW4, 1 
8E43 fetch 
c - line 292 



####################################### 

40 . nS 

200 nS 

####################################### 



STATUS: T9K40 — Running user program 
set symbols off 



Emulation trace complete. 



trace 



step display 



modify break 



end 



.R. 



-ETC- 



As you can see, the analysis trace display shows the trace list without 
symbol information. 
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Displaying Trace with 
Compress Mode 



If you want to see more executed instructions on a display, the 
TLCS-9000 emulator Softkey Interface provides compress mode for 
analysis display. To see trace display with compress mode, enter the 
following command: 

display trace compress on <RETURN> 



Trace List Depth=8192 Offset=0 

Label: Address Data Opcode or Status w/ Source Lines time count 

Base: hex hex mnemonic relative 

##########spmt_demo.c - line 200 ####################################### 



after = 


000C82 


A104 


INSTRUCT ION-- 


opcode unavailable 






+ 002 


0007E8 


0000 


0000 read 


mem word 


460 


nS 


+ 003 = 


000C84 


ABO 4 


INSTRUCT ION-- 


opcode unavailable 


40. 


nS 


+ 005 


0007EA 


0DD6 


0DD6 read 


mem word 


460 


nS 


+ 006 


0007EC 


0000 


0000 read 


mem word 


260 


nS 



+ 008 



+010 
+ 012 



##########spmt_demo 
for (i = 0; 
= 000DD6 8E43 
##########spmt_demo 
for (i = 0; 
= 000DD8 1BFA 
= 000DDA AB04 
##########spmt_demo 



.c - line 292 
i 1*3; i++) 
ADD.W:S RW4, 1 

,c - line 292 
i 1*3; i++) 
CP.W:S RW4,3 
JRC LT,000DD4 

.c - line 293 



####################################### 

280 nS 

####################################### 

260 nS 
240 nS 

####################################### 



STATUS: T9K40 — Running user program 
display trace compress on 

run trace step display 



Emulation trace complete. 



modify break 



end 



. R . 



-ETC- 



As you can see, the analysis trace display shows the analysis trace lists 
without fetch cycles. With this command you can examine program 
execution easily. 

If you want to see all of cycles including fetch cycles, enter following 
command: 

display trace compress off <RETURN> 

The trace display shows you all of the cycles the emulation analyzer 
have captured. 
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The emulator analyzer can capture states of instruction execution. If 
you want to trigger the analyzer when an instruction at a desired 
address is executed, you should not set up the analyzer trigger 
condition to detect the address. If you do so, the analyzer will be also 
triggered in case that the address is accessed to fetch the instruction, or 
read the data from address. You should use the execution 
address(eaddr) qualifier.Suppose that you want to trace the states of the 
execution after the instruction at clear Jbufferof the spmt_demo.c file, 
enter the following command. 

trace after eaddr clear_buffer <RETURN> 

The message "Emulation trace started" will appear on the status line, 
and the status line now shows "Emulation trace complete". 



Trace List Depth=8192 Offset=0 

Label: Address Data Opcode or Status w/ Source Lines time count 

Base: hex hex mnemonic relative 

##########spmt_demo.c - line 153 thru 157 ############################ 

level three 

clear_buf f er ( ) 
{ 

after = 000BEC D000 INSTRUCTION — opcode unavailable 

+002 0007E8 0000 0000 write mem word 460 nS 

##########spmt_demo.c - line 158 thru 159 ############################ 
int i ; 

for (i = 0; i 3; i++) 
= 000BEE INSTRUCTION — opcode unavailable 

##########spmt_demo.c - line 160 thru 161 ############################ 

{ 

data = 0; 

STATUS: T9K40 — Running user program Emulation trace complete ...R.... 

trace after eaddr clear_buffer 



run trace step display modify break end ETC — 



The emulator has disassemble capability in trace listing. When the 
emulator disassembles instructions in stored trace information, the fetch 
cycles of each instruction are required. When you displayed the results 
of analyzer trace, some lines which include "INSTRUCTION— opcode 
unavailable" message may be displayed. Each line is instruction 
execution cycle at the address in the left side of the displayed because 
the fetch states for the instructions were not stored by the analyzer. 



Trigger the Analyzer 
at an Instruction 
Execution State 
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To display complete disassembles in the trace listing, you should 
modify location of trigger state in trace list, referred to as the "trigger 
position", to "about" instead of "after". 



Displaying trace 
option 



You can specify whether the emulator display only bus cycles, or only 
execution cycles, or both cycles. To specify, the TLCS-9000 emulator 
Softkey Interface provides display trace option. To display only bus 
cycles, enter the following command: 

display trace mnemonic option 
bus_cycles_only <RETURN> 

If you want to display only execution cycles, enter the following 
command: 

display trace mnemonic option 
exec_cycles_only <RETURN> 

If you want to display bus cycles and execution cycles, enter the 
following command: 

display trace mnemonic option both_cycles 

<RETURN> 



Emulator Analysis The following analysis status qualifiers may also be used with the 
StatUS Qualifiers TLCS-9000 emulator. 



Oualif ier 


Status bits 


Description 


bus 


OxOxxxxxxxxxxxy 


bus cycle 


byte 


OxOlOxxxxxxlxxy 


byte memory cycle 


exec 


OOxxxlxxxxxxxxy 


execute instruction 


fetch 


OxOlOxlxxxxxlxy 


program fetch 


halt 


OxOllxxxxxxxxxy 


halt 


intack 


OxOOOxxxxxxxxxy 


interrupt acknowledge 


monitor 


OxOxxxxxxxxxxOy 


monitor cycle 


read 


OxOlOxxxxxxxlxy 


read 


user 


OxOxxxxxxxxxxly 


user program cycle 


word 


OxOlOxxxxxxOxxy 


word memory cycle 


write 


OxOlOxOxxxxxOxy 


write 



For a Complete 
Description 



For a complete description of using the HP 64700 Series analyzer with 
the Softkey Interface, refer to the Analyzer Softkey Interface User's 
Guide. 
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Resetting the 
Emulator 



To reset the emulator, enter the following command. 
reset <RETURN> 



Exiting the 
Soft key Interface 



There are several options available when exiting the Softkey Interface: 
exiting and releasing the emulation system, exiting with the intent of 
re-entering (continuing), exiting locked from multiple emulation 
windows, and exiting (locked) and selecting the measurement system 
display or another module. 



End Release System To exit the Softkey Interface, releasing the emulator so that other users 

may use the emulator, enter the following command. 

end release_system <RETURN> 



Ending to Continue You may also exit the Softkey Interface without specifying any 

Later options; this causes the emulator to be locked. When the emulator is 
locked, other users are prevented from using it and the emulator 
configuration is saved so that it can be restored the next time you enter 
(continue) the Softkey Interface. 

end <RETURN> 



Ending Locked from when using the Softkey Interface from within window systems, the 
All WindOWS "end" command with no options causes an exit only in that window. 

To end locked from all windows, enter the following command. 

end locked <RETURN> 

This option only appears when you enter the Softkey Interface via the 
emul700 command. 

Refer to the Softkey Interface Reference manual for more information 
on using the Softkey Interface with window systems. 
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Notes 
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In-Circuit Emulation Topics 



Introduction Many of the topics described in this chapter involve the installation, 

and the commands which relate to using the emulator in-circuit, that is, 
connected to a target system or demo target board. 

This chapter will: 

■ Show you how to install the emulation probe cable 

■ Show you how to install the emulation memory module. 

■ Show you how to install the emulation probe to demo target 
board. 

■ Describe the issues concerning the installation of the 
emulation probe into target systems. 

■ Describe how to execute program from target reset. This 
topics is related to program execution in general. 

■ Describe how to use software breakpoints with ROMed code, 
and how to test patches to ROMed code. These topics relate to 
the debugging of target system ROM. 



Pr6r6qU isitGS Before performing the tasks described in this chapter, you should be 

familiar with how the emulator operates in general. Refer to the 
Concepts of Emulation and Analysis manual and the "Getting Started" 
chapter of this manual. 
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Installing the 
Emulation Probe 
Cable 



The probe cables consist of three ribbon cables. The longest cable 
connects to J3 of the emulation control card, and to J3 of the probe. The 
shortest cable connects to J 1 of the emulation control card and Jl of the 
probe. The ribbon cables are held in place on the emulation control card 
by a cable clamp attached with two screws. No clamp holds the ribbon 
cables in the probe. 

1. Secure the cable on the emulation control card with cable 
clamp and two screws. 



PROBE CABLES 




Figure 3-1 Installing cables to the control board 
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2. When insert the ribbon cables into the appropriate sockets, 
press inward on the connector clops so that they into the 
sockets as shown. 




Figure 3-2 Installing cables into cable sockets 
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3. Connect the other ends of the cable s to the emulation probe. 




Figure 3-3 Installing cables to the emulation probe 
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Installing the 
Emulation 
Memory Module 



There are four types of emulation memory modules that can be inserted 
into sockets on the probe. 

1 . Remove plastic rivets that secure the plastic cover on the top 
of the emulation probe, and remove the cover. The bottom 
cover is only removed when you need to replace a defective 
active probe on the exchange program. 
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2. Insert emulation memory module on the emulation probe. 
There is a cutout on one side of the memory modules so that 
they can only be installed one way. 

To install memory modules, place the memory module into 
the socket groove at an angle. Firmly press the memory 
module into the socket to make sure it is completely seated. 
Once the memory module is seated in the connector groove, 
pull the memory module forward so that the notches on the 
socket fit into the holes on the memory module. There are two 
latches on the sides of the socket that hold the memory 
module in place. 




ALIGN 



Figure 3-5 Installing the memory module 



3. Replace the plastic cover, and insert new plastic rivets to 
secure the cover. 
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Installing into the 
Demo Target 
Board 



To connect the microprocessor connector to the demo target board, 
proceeded with the following instructions. 



1 . Remove front bezel and connect the power cable to the 
connector of the HP 64700A front panel. Refer to the HP 
64700 Series Installation/Service manual. 



2. With HP 64700A power OFF, connect the emulation probe to 
the demo target board. When you install the emulation probe 
into the demo target board, be careful not to bend any of the 
pins. 

After connection the probe to the demo target board, set the 
TEST/TARGET MODE and SINGLE CHIP/EXTERNAL 
BUS MODE switches. Use TEST MODE position when you 
run performance verification test, and use TARGET MODE 
position when you run the emulator in "out-of -circuit" mode. 
You must set SINGLE CHIP/EXTERNAL BUS switch 
according to 'Processor operation mode?' configuration. 




Figure 3-6 Installing the demo target board 
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3. Connect the power cable supply wires from the emulator to 
demo target board. When attaching the wire cable to the demo 
target board, make sure the connector is aligned properly so 
that all three pins are connected. 




Figure 3-7 Installing the power cable 
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Installing into a 
Target System 



The TLCS-9000 emulation probe has a 135-pin PGA connector; 
The emulation probe is also provided with a conductive pin protector to 
protect the delicate gold-plated pins of the probe connector from 
damage due to impact. 



Caution WKk Protect against electrostatic discharge. The emulator probe contains 

devices that are susceptible to damage by electrostatic discharge. 
Therefore, precautionary measures should be taken before handling the 
microprocessor connector attached to the end of the probe cable to 
avoid damaging the internal components of the probe by electrostatic 
electricity. 



Caution 



« 



Make sure target system power is OFF. Do not install the emulation 
probe into the target system microprocessor socket with power applied 
to the target system. The emulator may be damaged if target system 
power is not removed before probe installation. 



Caution 



Make sure pin 1 of probe connector is aligned with pin 1 of the 
socket. When installing the emulation probe, be sure that probe is 
inserted into the processor socket so that pin 1 of the connector aligns 
with pin 1 of the socket. Damage to the emulator probe will result if the 
probe is incorrectly installed. 



« 



Caution DO NOT use the microprocessor connector without using a pin 

protector. The pin protector prevents damage to the prove when 
inserting and removing the probe from the flexible adapter. 
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Caution 



« 



Compatibility of VOLTAGE/CURRENCY. Please be sure to check 
that the voltage/currency of the emulator and target system being 
connected are compatible. If there is a discrepancy, damage may result. 



Caution 



e 



Do not apply strong force to PGA-QFP probe, as that might damage 
the probe. 



Caution 



« 



Turn ON power. When you start to use the 64770A/B emulator which 
is plugged into a target system, you must turn HP 64770A/B power ON 
at first, then turn target system power ON. 



Caution 




Turn OFF power Do not turn HP 64770A/B power OFF while the 
emulator is plugged into a target system whose power is ON. 
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Installing into a 
QFP-PGA Adaptor 



To connect the microprocessor connector to the target system, 
proceeded with the following instructions. 



1. Attach the QFP socket/adapter(YAMAICHI 
IC149-120K13207-0B) on your target system. 

2. Connect the PGA-QFP probe(64770-61602) to the emulation 
probe through PGA connector( 1200- 1840). 

3. Install the PGA-QFP probe to the QFP socket/adaptor on your 
target system. 




Figure 3-8 Installing into a taget system board 
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In-Circuit 

configuration 

Options 



The TLCS-9000 emulation provides configuration options for the 
following in-circuit emulation issues. Refer to the "Configuring the 
Emulator" chapter for more information on these configuration option. 



Enabling BUSRQ, NMI, RESET and INT0-7(for HP 64770A), 
IREQ(for HP 64770B) Input from the Target System 

You can configure whe ther the emulator should accept or ignore the 
BUSRQ, NMI, RESET and INT0-7(for HP 64770A), IREQ(for HP 
64770B) signals from the target system. 



Running the You can specify that the emul ator beg ins execution from target system 

Emulation from reset. When the target system RESET line becomes active and then 

inactive, the emulator will start reset sequence (option) as actual 

Target Reset microprocessor. 



At first, you must specify the emulator responds to RESET signal by 
the target system (see the "Enable RESET inputs from target system?" 
configuration in "Configuring the Emulator" chapter on this manual). 

To Specify a run from target system reset, enter the following 
command: 

run from reset <RETURN> 

The status now shows that the emulator is "Awaiting target reset". 
After the target system is reset,the status line message will change to 
show the appropriate emulator status. 
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In the "Awaiting target reset" status, you can not break into the 
monitor. If you enter "run from reset" in the configuration that emulator 
ignores target system reset, you must reset the emulator. 



After you turn on the emulator, you must enter "reset" command and 
then "break" command to set the emulation stack pointer. 



The TLCS-9000 emulator supports power on reset. If you want 
program to be executed by power on reset, execute the following 
process. 

1) Enter "reset" 

2) Enter "break" 

3) Enter "run from reset" 

4) Turn OFF your target system 

4-1) If you see the p> system prompt, enter "run from reset" again. 

5) Turn On your target system 
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Pin State in 
Background 



While the emulator is running in the monitor, the probe pins of the 
emulator are in the following state. 



Address Bus 
Data Bus 
BSR/W 



UB /WEH 

LBAVEL 

CAS/QE 

RASO/CEO 

RAS1/CE1 

RAS2/CE2 

RAS3/CE3 



RFSH/CE 



Same as running user's program. 

Same as running user's program. 

Same as running user's program. 

Same as running user's program except accessing 
monitor area. When accessing monitor area, High 
level. 



Same as running user's program except accessing 
monitor area. When accessing monitor area, Low 
level. 
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Target System 
Interface 

RESET These signals are connected to 74HC 14 through 

PS 1 OK ohm pull-up register. 

NMI 

+5V 



RESET 

NMI 

PS 





74HCTH 




1 ► 






EA 



These signals are connected to 74ABT16244 
through 10K ohm pull-up register. 











74HBT16244 





Other signals These signals are connected to TLCS-9000 

emulation processor. 



^> 


TMP97C24 1 




TMP97C000 
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Notes 
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Configuring the Emulator 



Introduction Your TLCS-9000 emulator can be used in all stages of target system 

development. For instance, you can run the emulator out-of-circuit 
when developing target system software, or you can use the emulator 
in-circuit when integrating software with target system hardware. 
Emulation memory can be used in place of, or along with, target system 
memory. You can use the emulator's internal clock or the target 
system clock. You can execute target programs in real-time or allow 
emulator execution to be diverted into the monitor when commands 
request access of target system resources (target system memory, 
register contents, etc.) 

The emulator is a flexible instrument and it may be configured to suit 
your needs at any stage of the development process. This chapter 
describes the options available when configuring the TLCS-9000 
emulator. 

The configuration options are accessed with the following command. 
modify configuration <RETURN> 

After entering the command above, you will be asked questions 
regarding the emulator configuration. The configuration questions are 
listed below and grouped into the following classes. 
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General Emulator Configuration: 

- Restricting to real-time execution. 

- Selecting processor type. 

- Specifying processor operation mode. 

- Specifying value of the monitor base address. 

- Enabling emulation Vector Base Pointer. 

- Specifying value of Vector base address. 

- Specifying initial Current Bank Pointer value. 

Memory Configuration: 

- Mapping memory. 

Emulator Pod Configuration: 

- Enabling watch dog timer. 

- Enabling BUSRQ input from target system. 

- Enabling RESET input from target system. 

- Enabling interrupt requests. 

- Selecting target memory access size. 

Debug/Trace Configuration: 

- Enabling breaks on writes to ROM. 

- Specifying tracing of user program/emulation monitor 
cycles. 

- Selecting emulation analyzer speed. 
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Simulated I/O Configuration: Simulated I/O is described in the 
Simulated I/O reference manual. 

Interactive Measurement Configuration: See the chapter on 
coordinated measurements in the Softkey Interface Reference manual. 
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General Emulator 
Configuration 



The configuration questions described in this section involve general 
emulator operation. 



Restrict tO Real-Time This configuration allows to you specify whether program execution 

Runs? should take place in real-time or whether commands should be allowed 
to cause breaks to the monitor during program execution. 

no All commands, regardless of whether or not they 

require a break to the emulation monitor, are 
accepted by the emulator. 



yes When runs are restricted to real-time and the 

emulator is running the user program, all commands 
that cause a break (except "reset", "break", "run", 
and "step") are refused. For example, the following 
commands are not allowed when runs are restricted 
to real-time: 

■ Display/modify registers. 

■ Display/modify memory. 



e 



Caution WKk ^ your target system circuitry is dependent on constant execution of 

program code, you should restrict the emulator to real-time runs. This 
will help insure that target system damage does not occur. However, 
remember that you can still execute the "run", "reset", "break", and 
"step" commands; you should use caution in executing these 
commands. 
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Processor type? This question allows you to select which microprocessor to be 
(HP 64770 A) emulated. 



97PS40 



The TMP97PS40F, TMP97CS40F, and 
TMP97C241F microprocessors are emulated. When 
you emulate TMP97C241F microprocessor, you 
must specify "Processor operation mode? 
external_bus". 



97CM40 The TMP97CM40F microprocessor is emulated. 

97PW40 The TMP97PW40F, TMP97CW40F 

microprocessors are emulated. 

NONE no valid processor is selected. This is a power up 

default and can not break into monitor from reset 
until valid processor is selected. 



Processor type? This question allows you to select which microprocessor to be 
(HP 64770B) emulated. 



97CS42 The TMP97CS42, TMP97PU42(64K mode) 

microprocessors is emulated. 



97CU42 



The TMP97CU42, TMP97PU42(96K mode) 
microprocessor are emulated. 



97CW42 The TMP97PW42, TMP97CW42 microprocessors 

are emulated. 



NONE 



no valid processor is selected. This is a power up 
default and can not break into monitor from reset 
until valid processor is selected. 
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Note 




You must specify processor type before operation the emulator, 
Otherwise, you can not operate the emulator correctly. 



Note 



4 



Changing this configuration setting will drive the emulator into a reset 
state and will reset the memory mapping. Monitor address and vector 
address configurations will be set to their default. 



Processor Operation This configuration allows to you specify whether operation mode is 
mode? single chip mode or external bus mode. 



Note 



4 



single The emulator will operate in single chip mode, 

externaljbus The emulator will operate in external bus mode. 



TLCS-9000 emulator operates in accordance with this configuration 
instead of EA signal from target system. 

But when the emulator breaks into the monitor from reset state, EA 
signal must accord with this configuration. 



4 



Note Ha Changing this configuration setting will drive the emulator into a reset 

state and will reset the memory mapping. Monitor address and vector 
address configurations will be set to their default. 
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Monitor base 
address? 



This configuration allows you to specify the range of addresses that the 
monitor uses. The emulation monitor occupies 64K byte address space 
and the address of the monitor must be located on a 64K boundary. 
Valid address range is from 10000H through 0EF0000H. 



Note 



4 



Changing this configuration setting will drive the emulator into a reset 
state and will reset the memory mapping. The vector address 
configuration will set to its default. 



Enable emulation 
VBP? 



This configuration allows you to specify whether or not the emulation 
VBP is used. 



yes 



no 



The emulator supplies VBP value which determines 
the base address of the vector address. The 
emulator automatically initializes necessary vector 
entry to perform emulation tasks, emulation break, 
single stepping, and software breakpoint breaks. 

VBP value is read from target system. The 
emulator does not do initializations for the vector 
entries to perform emulation tasks. 



Note 



4 



Changing this configuration setting will drive the emulator into a reset 
state. 



Vector base 
address? 



This configuration allows you to specify the value for the VBP (Vector 
Base Pointer) to be calculated. Because this configuration is used 
whenever the emulator breaks into the monitor regardless "Enable 
emulation VBP?" configuration, you must specify address which 
accord with vector address. 
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Note 




Changing this configuration setting will drive the emulator into a reset 
state and will reset the memory mapping. 



Initial CBP Value? This configuration allows you to specify the value of CBP (Current 

Bank Pointer) when the emulator breaks into the monitor from reset 
state. When emulation VBP is enabled and first 256 byte of vector area 
is mapped as emulation ROM/RAM, this configuration is ignored and 
CBP is initialized along with the vector entry. 
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The memory configuration questions allows you to select the monitor 
type, to select the location of the monitor, and to map memory. To 
access the memory configuration questions, you must answer "yes" to 
the following question. 

Modify memory configuration? 

Mapping Memory The emulation memory consists of 256k, 1M, or 4Mbytes. You can 

define up to 7 memory range. 

The memory mapper allows you to characterize memory locations. It 
allows you specify whether a certain range of memory is present in the 
target system or whether you will be using emulation memory for that 
address range. You can also specify whether the target system memory 
is ROM or RAM, and you can specify that emulation memory be 
treated as ROM or RAM. 

The internal RAM area(if you select the single chip mode, also internal 
ROM area) and emulation monitor area are mapped automatically. And 
you can not delete these map terms. External I/O area can not be 
mapped as emulation memory. 

When you characterize memory ranges as emulation memory, note the 
following. 

■ When you characterize memory range which does not override 
64K byte boundary as emulation memory, 64K byte is used. 

For example, when you characterize memory rang(1000h thru 
OlOffh), 64K byte of emulation memory is used. 

■ When you characterize memory range which override N block 
of 64K byte as emulation memory, 64K x 2 M (2 M_1 < N =< 
2 M ) byte is used. 

For example, when you characterize memory range(0ff00h 
thru 200ffh) which overrides 3 block of 64K byte as emulation 
RAM, the 64K x 2 2 (2 1 < 3 =< 2 2 :M=2) byte of emulation 
memory is used. 

For examle, when 192K byte emulation memroy is remained 
you can not characterize memory range(80000h thru Oaffffh), 
which is 192K byte and override 3 block of 64K byte, as 



Memory 
Configuration 
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emulatoin RAM by one mapper term because the emulator 
needs 256K byte to map memory range(80000h thru Oaffffh) 
In this case, you can characterize that memeoy range by two 
mapper term, the one is 128K byte(80000h thru 9ffffh) 
mapper term, the another is 64K byte(0a0000h thru Oaffffh) 
mapper term. 



4 



Note 11 rl Target system accesses to emulation memory are not allowed. 

Target system devices that take control of the bus (for example, DMA 
controllers) cannot access emulation memory. 



Blocks of memory can also be characterized as guarded memory. 
Guarded memory accesses will generate "break to monitor" requests. 
Writes to ROM will generate "break to monitor" requests if the "Enable 
breaks on writes to ROM?" configuration item is enabled (see the 
"Debug/Trace Configuration" section which follows). 

Determining the Locations to be Mapped 

Typically, assemblers generate relocatable files and linkers combine 
relocatable files to form the absolute file. The linker load map listing 
will show what locations your program will occupy in memory. 
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Emulator Pod 
Configuration 



To access the emulator pod configuration questions, you must answer 
"yes" to the following question. 



Modify emulator pod configuration? 

Enable WatCh dog This question allows you to specify whether the watch dog timer is 
timer? enabled or disabled when usr' s program running. 

(HP 64770A Only) 



yes 
no 



The emulator enables watch dog timer. 
The emulator disables watch dog timer. 



Respond tO BUSRQ This co nfiguratio n allows you to specify whether or not the emulator 
from target System? accepts BUSRQ(Bus Request) signal generated by the target system. 



yes The emu lator accepts BUSRQ signal. When the 

BUSRQ is accepted, the emulator will respond as 
actual microprocessor. 



no The emulator ignore BUSRQ signal from target 

system completely. 



Respond tO RESET The TLCS-9000 emulator can respond or ignore target system reset 
from target System ? while running in user program or waiting for target system reset (refer 

to "run from reset" command in the Softkey Interface Reference 
manual). While running in monitor, the TLCS-9000 emulator ignores 
target system reset completely independent on this setting. 



yes Specify that, this is a default configuration, make 

the emulator to respond to reset from target system. 
In this configuration, emulator will accept reset and 
execute from reset vector as same manner as actual 
microprocessor after reset is inactivated. 
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no 



The emulator ignores reset signal from target 
system completely, even while in foreground 
(executing user program). 



Note 



4 



Changing this configuration option will drive the emulator into a reset 
state. 



Respond to 
interrupts ? 



This question allows you to specify whether or not the emulation 
processor accepts interrupts. 



yes 



no 



The emulator will r espon d to interrupt requests 
from targ et sys tem(NMI and INTO-3 for HP 
64770A, NMI and IREQ for 64770B) and an 
internal peripheral during user program execution. 

The emulator will always ignore interrupt requests. 



Note 



4 



When target interrupts signal is enabled, it is in effect while the 
emulator is run ning the target program. While the emulator is running 
monitor, NMI, INT0-7(edge sense) for HP 64770 A, IREQ for HP 
64770B will be suspended until the emulator goes into user's program. 



Target memory 
access size 



This configuration specifies the type of microprocessor cycles that are 
used by the monitor program to access target memory or I/O locations. 
When a command requests the monitor to read or write to target system 
memory or I/O, the monitor program will look at the access mode 
setting to determine whether byte or word instructions should be used. 



bytes 



Selecting the byte access mode specifies that the 
emulator will access target memory using byte 
cycles (one byte at a time). 
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words Selecting the word access mode specifies that the 

emulator will access target memory using word 
cycles (one word at a time). 

any Selecting the any access mode specifies that the 

emulator will access target memory using a 
display/modify target memory command option. If 
option "words" is specified, access size will be set 
to "words". Other target memory commands such as 
"load" and "store" will use an access size of "bytes". 



Debug/Trace 
Configuration 



The debug/trace configuration questions allows you to specify breaks 
on writes to ROM, enable/disable the software breakpoints feature, and 
specify that the analyzer trace foreground/background execution. To 
access the debug/trace configuration questions, you must answer "yes" 
to the following question. 

Modify debug/trace options? 



Break Processor on 
Write to ROM? 



This question allows you to specify that the emulator break to the 
monitor upon attempts to write to memory space mapped as ROM. 
The emulator will prevent the processor from actually writing to 
memory mapped as emulation ROM; however, they cannot prevent 
writes to target system RAM locations which are mapped as ROM, 
even though the write to ROM break is enabled. 



yes 



no 



Causes the emulator to break into the emulation 
monitor whenever the user program attempts to 
write to a memory region mapped as ROM. 

The emulator will not break to the monitor upon a 
write to ROM. The emulator will not modify the 
memory location if it is in emulation ROM. 
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4 



Note Ha Th e wrrom trace command status option allows you to use "write to 

ROM" cycles as trigger and storage qualifiers. For example, you could 
use the following command to trace about a write to ROM: 
trace about status wrrom <RETURN> 



Trace monitor or 
user program 
operation? 



This question allows you to specify whether the analyzer trace only 
user program emulation processor cycles, only monitor cycles, or both 
monitor or user program cycles. 



user 



monitor 



both 



Specifies that the analyzer trace only user program 
cycles. This option is specified by the default 
emulator configuration. 

Specifies that the analyzer trace only emulation 
monitor cycles. (This is rarely a useful setting.) 

Specifies that the analyzer trace both user program 
and emulation monitor cycles. You may wish to 
specify this option so that all emulation processor 
cycles may be viewed in the trace display. 



Emulation analyzer 
speed? 
(HP 64770A Only) 



This question allows you specify the emulation processor clock speed. 
The analyzer capabilities of time and state count are affected by the 
processor clock speed. If you use 64794A/C/D Deep emulation 
analyzer, the trace state and time counter qualifiers can be used 
regardless of clock speed. You must answer this question, when you 
use HP 64770A emulator with HP 64704A emulation bus analyzer. 



slow 



Specifies the processor clock speed is less than or 
equal to 16MHz. Both state and time counting are 
available. 



fast 



Specifies the processor clock speed is greater than 
16MHz. Only state counting are available. 
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Simulated I/O 
Configuration 



The simulated I/O feature and configuration options are described in 
the Simulated I/O reference manual. 



Interactive The interactive measurement configuration questions are described in 

MeaSU reme nt ^ e cna P ter on coordinated measurements in the Softkey Interface 

_ Reference manual. Examples of coordinated measurements that can be 

Conf igU ration performed between the emulator and the emulation analyzer are found 

in the "Using the Emulator" chapter. 



S3 Vi n CJ a The last configuration question allows you to save the previous 

configuration specificat 
emulator at a later time. 



Conf igU ration configuration specifications in a file which can be loaded back into the 



Configuration file name? <FILE> 

The name of the last configuration file is shown, or no filename is 
shown if you are modifying the default emulator configuration. 

If you press <RETURN> without specifying a filename, the 
configuration is saved to a temporary file. This file is deleted when 
you exit the Softkey Interface with the "end release_system" command. 

When you specify a filename, the configuration will be saved to two 
files; the filename specified with extensions of ".EA" and ".EB". The 
file with the ".EA" extension is the "source" copy of the file, and the 
file with the ".EB" extension is the "binary" or loadable copy of the file. 

Ending out of emulation (with the "end" command) saves the current 
configuration, including the name of the most recently loaded 
configuration file, into a "continue" file. The continue file is not 
normally accessed. 
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Loading a 
Configuration 



Configuration files which have been previously saved may be loaded 
with the following Softkey Interface command. 



load configuration <FILE> <RETURN> 

This feature is especially useful after you have exited the Softkey 
Interface with the "end release_system" command; it saves you from 
having to modify the default configuration and answer all the questions 
again. To reload the current configuration, you can enter the following 
command. 

load configuration <RETURN> 



4-16 Configuring the Emulator 



5 



Using the Emulator 

Introduction The "Getting Started" chapter shows you how to use the basic 

This chapter discuss: 

■ Register names and classes 

■ Hardware breakpoint 

■ Vector area setting 

■ Analyzer topics 

- Specifying address and status for trigger or store condition 

- Specifying data for trigger or store condition 

- Specifying execute address for trigger or store condition 

■ Features available via "pod_command" 
This chapter shows you how to: 

■ Store the contents of memory into absolute files 

■ Make coordinated measurements 



Using the Emulator 5-1 



REGISTER CLASS 
and NAME 



Summary 70732 register designator. All available register class names and 
register names are listed below. 

<REG_CLASS> 

<REG_NAME> Description 
*(AU basic registers) 



PC BASIC registers. 

RWO 

RW1 

RW2 

RW3 

RW4 

RW5 

RW6 

RW7 

RW8 

RW9 

RW10 

RW11 

RW12 

RW13 

RW14 

RW15 

ISP 

USP 

FP 

CBP 

PBP 

PSW 



5-2 Using the Emulator 



PBANK (Previous bank registers) 



PPC 


Saved PC 


PPSW 


Saved PSW 


PPBP 


Saved PBP 


PRO 


pwO on previous bank 


PR1 


pwl on previous bank 


PR2 


pw2 on previous bank 


PR3 


pw3 on previous bank 


PR4 


pw4 on previous bank 


PR5 


pw5 on previous bank 


PR6 


pw6 on previous bank 


PR7 


pw7 on previous bank 


PR8 


pw8 on previous bank 


PR9 


pw9 on previous bank 


PR10 


pwlO on previous bank 


PR11 


pwl 1 on previous bank 


PR12 


pwl 2 on previous bank 


PR13 


pwl 3 on previous bank 


PR14 


pwl4 on previous bank 


PR15 


pwl 5 on previous bank 



SYS (System control registers) (HP 64770A Only) 



WDMOD Watch dog timer mode 

WDCR Watch dog timer control 

CHOCR Memory controller channel 0 

CH1CR Memory controller channel 1 

CH2CR Memory controller channel 2 

CH3CR Memory controller channel 3 

REFHREG Refresh control 



(Write Only) 



SYS (System control registers) (HP64770B Only) 



OMR Operation mode 

PDMR Power down mode 

STBYMD Stand-by mode 

CHOCR Memory controller channel 0 

CH1CR Memory controller channel 1 

CH2CR Memory controller channel 2 

CH3CR Memory controller channel 3 

REFHREG Refresh control 
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TMR (Timer registers) (HP 64770A Only) 



TRUNO 


Timer control (TRUN0123) 




TRUN4 


Timer control (TRUN4567) 




TRDCO 


Double buffer control (TRDC0123) 




TRDC4 


Double buffer control (TRDC4567) 




TFFCRO 


Timer flip-flop control (TFFCR0123) 


TFFCR4 


Timer flip-flop control (TFFCR4567) 


T01MOD 


Timer source elk and mode 


(Write Only) 


T23MOD 


Timer source elk and mode 


(Write Only) 


T45MOD 


Timer source elk and mode 


(Write Only) 


T67MOD 


Timer source elk and mode 


(Write Only) 


TREGO 


Timer register 0 


(Write Only) 


TREG1 


Timer register 1 


(Write Only) 


TREG2 


Timer register 2 


(Write Only) 


TREG3 


Timer register 3 


(Write Only) 


TREG4 


Timer register 4 


(Write Only) 


TREG5 


Timer register 5 


(Write Only) 


TREG6 


Timer register 6 


(Write Only) 


TREG7 


Timer register 7 


(Write Only) 


TTORUN 


Timer control 0 




TT1RUN 


Timer control 1 




TTOMOD 


Timer source elk and mode 




TT1MOD 


Timer source elk and mode 




TTOFFCR 


Timer flip-flop control 




TT1FFCR 


Timer flip-flop control 




TTREGO 


Timer register 0 


(Write Only) 


TTREG1 


Timer register 1 


(Write Only) 


TTREG2 


Timer register 2 


(Write Only) 


TTREG3 


Timer register 3 


(Write Only) 


CAP1 


Capture register 1 


(Read Only) 


CAP2 


Capture register 2 


(Read Only) 


CAP3 


Capture register 3 


(Read Only) 


CAP4 


Capture register 4 


(Read Only) 
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GTO (General output timer registers)(HP 64770B Only) 



GTR General timer 

CPRSO Compare reg for " Set chO" 

CPRS1 Compare reg for " Set ch 1 " 

CPRS2 Compare reg for "Set ch2" 

CPRS3 Compare reg for "Set ch3" 

CPRS4 Compare reg for " Set ch4" 

CPRS5 Compare reg for "Set ch5" 

CPRS6 Compare reg for " Set ch6" 

CPRS7 Compare reg for " Set ch7" 

CPRRO Compare reg for "Reset chO" 

CPRR1 Compare reg for "Reset chl" 

CPRR2 Compare reg for "Reset ch2" 

CPRR3 Compare reg for "Reset ch3" 

CPRR4 Compare reg for "Reset ch4" 

CPRR5 Compare reg for "Reset ch5" 

CPRR6 Compare reg for "Reset ch6" 

CPRR7 Compare reg for "Reset ch7" 

DOMR1 Digital output mode 

DOCR Digital output control 

DOR1 Digital out (Read Only) 

LGTO Output level of GTO 

GTOEN GTO enable 
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GTI (General input timer registers)(HP 64770B Only) 



CPCLO 


Pulse conter latch 0 


(Read Only) 


CPCL1 


Pulse conter latch 1 


(Read Only) 


CPCL2 


Pulse conter latch 2 


(Read Only) 


CPCL3 


Pulse conter latch 3 


(Read Only) 


GTAOP 


GTIA positive edge 0 


(Read Only) 


PTA1P 


kj 1 1/\ positive euge i 


/D- Qr l Onl\A 
^IvCaU xJllLy ) 


GTA2P 


GTIA positive edge 2 


(Read Only) 


GTA3P 


GTIA positive edge 3 


(Read Only) 


GTAON 


GTIA negative edge 0 


(Read Only) 


GTA1N 


GTIA negative edge 1 


(Read Only) 


GTA2N 


GTIA negative edge 2 


(Read Only) 


GTA3N 


GTIA nagative edge 3 


(Read Only) 


GTBO 


GTIB edge 0 


(Read Only) 


GTB1 


GTIB edge 1 


(Read Only) 


GTB2 


GTIB edge 2 


(Read Only) 


GTB3 


GTIB edge 3 


(Read Only) 


POUT (Pulse timer output registers)(HP 64770B Only) 


TIOC 


TIO control 




LPOUT 


Output level of POUT 


(Read Only) 


DOMR2 


Digital output mode 




DOR2 


Digital out 




CPRDO 


Compare register for Pout 0 




CPRD1 


Compare register for Pout 1 




CPRD2 


Compare register for Pout 2 




CPRD3 


Compare register for Pout 3 




CPRD4 


Compare register for Pout 4 




CPRD5 


Compare register for Pout 5 




CPRD6 


Compare register for Pout 6 




CPRD7 


Compare register for Pout 7 
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POC (Pulse output down-counter registers)(HP 64770B Only) 



CPOCO 


Pulse 


CPOC1 


Pulse 


CPOC2 


Pulse 


CPOC3 


Pulse 


CPOC4 


Pulse 


CPOC5 


Pulse 


CPOC6 


Pulse 


CPOC7 


Pulse 



output counter of chO 
output counter of chl 
output counter of ch2 
output counter of ch3 
output counter of ch4 
output counter of ch5 
output counter of ch6 
output counter of ch7 



SC (Serial communication registers) (HP 64770A Only) 



SCOCR 


Serial 


channel 0 


control 




SCOMOD 


Serial 


channel 0 


mode 




BROCR 


Serial 


channel 0 


baud rate 


control 


SCOBUF 


Serial 


channel 0 


buffer 




SC1CR 


Serial 


channel 1 


control 




SC1MOD 


Serial 


channel 1 


mode 




BR1CR 


Serial 


channel 1 


baud rate 


control 


SC1BUF 


Serial 


channel 1 


buffer 




SC2CR 


Serial 


channel 2 


control 




SC2MOD 


Serial 


channel 2 


mode 




BR2CR 


Serial 


channel 2 


baud rate 


control 


SC2BUF 


Serial 


channel 2 


buffer 




ODE 


Port 8 


open-drain enable 





Using the Emulator 5-7 



SCI (Serial interface registers) (HP 64770B Only) 



SCATB 


SCIA transmit buffer 


(Write Only) 


SCARB 


SCTA receive buffer 


(Read Onlv) 


SCAMR 


SCIA mode 




SCASR 


SCIA status 


(Read Only) 


7>v .w is. 


oLiA control 




SC2TB 


SCI2 transmit buffer 


(Write Only) 


SC2RB 


SCI2 receive buffer 


(Read Only) 


SC2MR 


SCI2 mode 




SC2SR 


SCI2 status 


(Read Only) 


SC2CR 


SCI2 control 




SCBTB 


SCIB transmit buffer 


(Write Only) 


SCBRB 


SCIB receive buffer 


(Read Only) 


SCBMR 


SCIB mode 




SCBSR 


SCIB status 


(Read Only) 


SCBCR 


SCIB control 




SEI (Expansion serial interface registers) (HP 64770B Only) 


ASCR 


Asynchronous mode command 


(Write Only) 


ASBF 


Asynchronous mode buffer 


(Read Only) 


AKCR 


Synchronous mode command 


(Write Only) 


SKBF 


Synchronous mode buffer 


(Read Only) 


SE2CR 


SEE control & status 




SE3BO 


SEI3 buffer register out 


(Write Only) 


SE3BI 


SEI3 buffer register in 


(Read Only) 


SE3SFO 


SEI3 shift register out 


(Write Only) 


SE3SFI 


SEI3 shift register in 


(Read Only) 


SE3CR 


SEI3 control 




SESR 


SEI shif register 




SECR 


SEI control & status 




SMP (Serial monitor port registers) (HP 64770B Only) 


SMISR 


SMP input shift register 


(Read Only) 


SMOSR 


SMP output shift register 


(Write Only) 


SMFULL 


SMP input full register 
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AD (A/D converter registers) (HP 64770A Only) 



ADMOD 

ADCCS 

ADREG04 

ADREG15 

ADREG26 

ADREG37 



A/D converter mode 
ADC channel selector 
AD result 04 
AD result 15 
AD result 26 
AD result 37 



(Read Only) 
(Read Only) 
(Read Only) 
(Read Only) 



DMA (DMA controler registers) (HP 64770B Only) 



MARO Memory address 0 

DTCRO Data transfer count 0 

MAR1 Memory address 1 

DTCR1 Data transfer count 1 

MAR2 Memory address 2 

DTCR2 Data transfer count 2 

MAR3 Memory address 3 

DTCR3 Data transfer count 3 

MAR4 Memory address 4 

DTCR4 Data transfer count 4 

MAR5 Memory address 5 

DTCR5 Data transfer count 5 

CHSRO Channel status 0 (Read Only) 

CHSR1 Channel status 1 (Read Only) 

CHSR2 Channel status 2 (Read Only) 
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INT (Interrupt control registers) (HP 64770A Only) 



INTEO 


Interrupt 


INTE1 


Interrupt 


INTE2 


Interrupt 


INTE3 


Interrupt 


INTE4 


Interrupt 


INTE5 


Interrupt 


INTE6 


Interrupt 


INTE7 


Interrupt 


INTETO 


Interrupt 


INTET1 


Interrupt 


INTET2 


Interrupt 


INTET3 


Interrupt 


INTET4 


Interrupt 


INTET5 


Interrupt 


INTET6 


Interrupt 


INTET7 


Interrupt 


INTETTO 


Interrupt 


INTETT1 


Interrupt 


INTETT2 


Interrupt 


INTETT3 


Interrupt 


INTESOR 


Interrupt 


INTESOT 


Interrupt 


INTES1R 


Interrupt 


INTES1T 


Interrupt 


INTES2R 


Interrupt 


INTES2T 


Interrupt 


INTEAD 


Interrupt 


INTETASK 


Interrupt 


INMIMC 


Interrupt 



enable 0 
enable 1 
enable 2 
enable 3 
enable 4 
enable 5 
enable 6 
enable 7 

enable 8 bit timer 0 
enable 8 bit timer 1 
enable 8 bit timer 2 
enable 8 bit timer 3 
enable 8 bit timer 4 
enable 8 bit timer 5 
enable 8 bit timer 6 
enable 8 bit timer 7 
enable 16 bit timer TTREGO 
enable 16 bit timer TTREG1 
enable 16 bit timer TTREG2 
enable 16 bit timer TTREG3 
enable serial 0 receive 
enable serial 0 transmit 
enable serial 1 receive 
enable serial 1 transmit 
enable serial 2 receive 
enable serial 2 transmit 
enable A/D 
enable TASK 
NMI input mode control 
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PIC (Interrupt control registers) (HP 64770B Only) 



GTICR 


General timer interrupt control 


TIICRO 


GTI interrupt control 0 


TIICR1 


GTI interrupt control 1 


TIICR2 


GTI interuput control 2 


TOICRO 


GTO interrupt control 0 


TOICR1 


GTO interrupt control 1 


TOICR2 


GTO interrupt control 2 


TOICR3 


GTO interrupt control 3 


POICRO 


POUT interrupt control 0 


POICR1 


POUT interrupt control 1 


SIOICRO 


SCI interupt control 


DMAICRO 


SCI2 interupt control 


DMAICR1 


SCI3 interupt control 


SWICRO 


SOFTWARE interrupt control 0 


SWICR1 


SOFTWARE interrupt control 1 


SWICR2 


SOFTWARE interrupt control 2 


NMIRQ 


NMI interrupt request flag 


GTIRQ 


GT interrupt request flag 


TIIRQ 


Timer input interrupt request flag 


TOISRQ 


Timer output set interrupt request 


TOIRRQ 


Timer output reset interrupt request 


POIRQ 


Pout interrupt flag 


DMAIRQ 


DMA interrupt flag 


SWIRQ 


SWI interrupt flag 
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PRT (Port registers) (HP 64770A Only) 



PTO 


Port 0 




PT1 


Port 1 




PT2 


Port 2 




PT3 


Port 3 




PT4 


Port 4 




PT5 


Port 5 




PT6 


Port 6 




PT7 


Port 7 




PT8 


Port 8 




PT9 


Port 9 




PTA 


Port A 




PTB 


PortB 




PTC 


PortC 


(Read Only) 


POCR 


Port 0 control 


(Write Only) 


POFC 


Port 0 function 


(Write Only) 


P1CR 


Port 1 control 


(Write Only) 


P1FC 


Port 1 function 


(Write Only) 


P2CR 


Port 2 control 


(Write Only) 


P2FC 


Port 2 function 


(Write Only) 


P3CR 


Port 3 control 


(Write Only) 


P3FC 


Port 3 function 


(Write Only) 


P4CR 


Port 4 control 


(Write Only) 


P4FC 


Port 4 function 


(Write Only) 


P5CR 


Port 5 control 


(Write Only) 


P5FC 


Port 5 function 


(Write Only) 


P6CR 


Port 6 control 


(Write Only) 


P6FC 


Port 6 function 


(Write Only) 


P7CR 


Port 7 control 


(Write Only) 


P7FC 


Port 7 function 


(Write Only) 


P8CR 


Port 8 control 


(Write Only) 


P8FC 


Port 8 function 


(Write Only) 


P9CR 


Port 9 control 


(Write Only) 


P9FC 


Port 9 function 


(Write Only) 


PACR 


Port A control 


(Write Only) 


PAFC 


Port A function 


(Write Only) 


PBCR 


Port B control 


(Write Only) 


PBFC 


Port B function 


(Write Only) 
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PRT (Port registers) (HP 64770B Only) 



PO Port 0 data 

PI Port 1 data 

P2 Port 2 data 

P3 Port 3 data 

P4 Port 4 data 

P5 Port 5 data 

P6 Port 6 data 

P9 Port 9 data 

PJ Port J data 

PF Port F data 

PG Port G data 

PM Port M data 

PH Port H data 

PS Port S data 

POCR Port 0 control 

POFC Port 0 function 

P1CR Port 1 control 

P1FC Port 1 function 

P2CR Port 2 control 

P2FC Port 2 function 

P3CR Port 3 control 

P3FC Port 3 function 

P4CR Port 4 control 

P4FC Port 4 function 

P5CR Port 5 control 

P5FC Port 5 function 

P6CR Port 6 control 

P6FC Port 6 function 

P9CR Port 9 control 

PJCR Port J control (Write Only) 

PFCR Port F control 

PGCR Port G control 

PMCR Port M control 

PHCR Port H control 

PSCR Port S control 
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PFSRO Port function select 0 

PFSR1 Port function select 1 

PFSR2 Port function select 2 

PFSR3 Port function select 3 

PFSR4 Port function select 4 (Write Only) 

PFSR5 Port function select 5 

PFSR6 Port function select 6 



OTHER (Other registers) 



RBO 

RBI 

RB2 

RB3 

RB4 

RB5 

RB6 

RB7 

RB8 

RB9 

RB10 

RB11 

RB12 

RB13 

RB14 

RB15 

RDO 

RD2 

RD4 

RD6 

RD8 

RD10 

RD12 

RD14 

USPL 

USPH 

FPL 

FPH 



RBO 

RBI 

RB2 

RB3 

RB4 

RB5 

RB6 

RB7 

RB8 

RB9 

RB10 

RB11 

RB12 

RB13 

RB14 

RB15 

RDO 

RD2 

RD4 

RD6 

RD8 

RD10 

RD12 

RDM 

lower 16 bits of USP 
upper 16 bits of USP 
lower 16 bits of FP 
upper 16 bits of FP 
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Hardware 
Breakpoints 



The analyzer may generate a break request to the emulation processor. 
To break when the analyzer trigger condition is satisfied, use the 
"break_on_trigger" trace option. 



Additionally, you can see the program states before the breakpoint in 
trace listing. Specify the trigger position at the end of trace listing by 
using "before" option. 

When the trigger condition is found, the emulator execution will break 
into the emulation monitor. Then you can also see the trace listing 
mentioned above, enter the following commands. 

trace before <QUALIFIER> 
break_on_trigger<RETURN> 

Without the trigger condition, the trigger will never occur and will 
never break. 



Vector Area 
Setting 



TLCS-9000 microprocessor has vector area(2k bytes). TLCS-9000 
emulator uses three vector entry in vector area to realize the following 
emulator features. 

■ Break 

■ Single-Step 

■ Software Break Point 



Single Chip Mode 



If you use the TLCS-9000 emulator in single chip mode, you do not 
need to set the vector entry since the emulator set automatically. The 
values of PC, PSW, and CBP are set bye vector entry when the 
emulator breaks into the monitor from reset state. 



External Bus Mode 



IF you use the TLCS-9000 emulator in external bus mode, the way of 
the emulator's operations differ according to "Enable emulation VBP?" 
configuration and memory mapping. 
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"Enable emulation VBP? yes" 



The emulator read Vector Base Pointer(VBP) from emulation VBP. 
When the emulator breaks into the monitor from reset state, the value 
of emulation VBP is specified by "Vector base address?" configuration. 

If vector area are mapped as emulation memory, the emulator sets the 
vector entry when the emulator breaks into the monitor from reset state. 
When the emulator breaks into the monitor from reset state, the values 
of PC, PSW, and CBP are set by vector entry. 

If vector area are mapped as target memory, the emulator uses copy of 
vector area. The emulator copies data of vector ares when the emulator 
breaks into the monitor from reset state, and then sets the vector entry. 
When the emulator breaks into the monitor from reset, the value of PC, 
and PSW are set by vector entry and the value of CBP is specified by 
"Initial CBP value?" configuration. 

"Enable emulation VBP? no" 

In this case, the emulator does not set the vector entry. So you must set 
up the vector entry to realize the emulator features. If you do not set the 
vector entry, the emulator can not operate correctly. 

Even if you specify that "Enable emulation VBP? no", the value of PC, 
PSW, and CBP are specified in the same way as you specify that 
"Enable emulation VBP? yes" when the emulator breaks into the 
monitor from reset state. 

Set the vector area as following. 



Vector number 


Offset 


value 


Purpose 


12 


60H 


0000H 


Break 


62H 


0202H 


64H 


OOxxH 


66H 


0000H 


Vector number 


Offset 


value 


Purpose 
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14 


70H 


OOOOH 


Step 


72H 


0204H 


74H 


OOxxH 


76H 


OOOOH 


31 


F8H 


OOOOH 


Software break 
point 


FAH 


0200H 


FCH 


OOxxH 


FEH 


OOOOH 



xx: Upper 8 bits of monitor area 



Analyzer Topics 

The analyzer captures the actual bus states and execute states by 
exclusive bus. In some case, bus state and execute state are captured 
simultaneously. To specify actual bus states for trigger or store 
condition by "address", "status", and "data", you should add "status 
bus" condition to trigger/store condition as following. 

trace after address lOOOh status £>us<RETURN> 
trace after status write and bus 

The analyzer captures the actual bus states of the TLCS-9000 
microprocessor. When you specify a data in the analyzer trigger or 
store condition, the ways of analyzer data specification differ according 
to the address and the data size. 

To trigger analyzer when the TLCS-9000 microprocessor accesses the 
byte data 12h at address 1000h(even address), enter the following, 

trace after address lOOOh data 0xxl2h status 
bus and byte 

To trigger analyzer when the TLCS-9000 microprocessor accesses the 
byte data 12h at address 1001h(odd address), enter the following, 



Specifying Address 
and Status for 
Trigger or Store 
Condition 



Specifying Data for 
Trigger or Store 
Condition 
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trace after address lOOlh data 012xxh status 
bus and byte 

To trigger analyzer when the TLCS-9000 microprocessor accesses the 
word data 1234h at address 1001h(odd address), the data bus activity of 
cycles will be as follows. 

Sequencer level Address bus Data bus 

1 1001 34xx 

2 1002 xxl2 

In this case, you need to use the analyzer sequential trigger capabilities. 
We do not describe the detail about the sequential trigger feature. Only 
how to trigger the analyzer at this example is described. To specify the 
condition, enter; 

trace find_sequence lOOlh data 34xxh status 
bus trigger after 10 02h data 0xxl2h status 

bus <RETURN> 



Specifying Execute 
Address for Trigger 
or Store Condition 



To specify "eaddr" for trigger or store condition, you must specify even 
addresses as execute address. To trigger analyzer when TLCS-9000 
microprocessor executes instruction at address 2000h, enter the 
following, 

trace after eaddr 2000h <RETURN> 
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Features Available 
via Pod 
Commands 



Several emulation features available in the Terminal Interface but not 
in the Softkey Interface may be accessed via the following emulation 
commands. 



display pod_command <RETURN> 

pod_command ' <Terminal Interface command>' 
<RETURN> 

Some of the most notable Terminal Interface features not available in 
the Softkey Interface are: 

■ Searching memory for strings or numeric expressions. 

■ Sequencing in the analyzer. 

Refer to your Terminal Interface documentation for information on 
how to perform these tasks. 



4 



Note Mil Be careful when using the "pod_command". The Softkey Interface, 

and the configuration files in particular, assume that the configuration 
of the HP 64700 pod is NOT changed except by the Softkey Interface. 
Be aware that what you see in "modify configuration" will NOT reflect 
the HP 64700 pod's configuration if you change the pod's 
configuration with this command. Also, commands which affect the 
communications channel should NOT be used at all. Other commands 
may confuse the protocol depending upon how they are used. The 
following commands are not recommended for use with 
"pod_command": 

stty, po, xp - Do not use, will change channel operation and hang, 
echo, mac - Usage may confuse the protocol in use on the channel, 
wait - Do not use, will tie up the pod, blocking access, 
ink, pv - Will reset pod and force end release_system. 
t - Do not use, will confuse trace status polling and unload.0h)0 
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Storing Memory 
Contents to an 
Absolute File 



The "Getting Started" chapter shows you how to load absolute files into 
emulation or target system memory. You can also store emulation or 
target system memory to an absolute file with the following command. 



store memory 800h thru 84fh to absfile 
<RETURN> 

The command above causes the contents of memory locations 
800H-84FH to be stored in the absolute file "absfile.X". Notice that the 
".X" extension is appended to the specified filename. 



Coordinated For information on coordinated measurements and how to use them, 

MeaSU reme ntS r£ ^ er t0 ^ e "Coordinated Measurements" chapter in the Softkey 

, _ ... .„ Interface Reference manual. 
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Index 



A absolute files 

loading, 2-8 

storing, 5-20 
adaptor 

installing, 3-11 
address 

symbolic, 2-16 
analyzer 

features of, 1-5 

sequencing, 5-19 

status qualifiers, 2-30 
analyzer, using the, 2-25 
assemblers, 4-10 

assembling the demo program, 2-3 

B background monitor 

pin state, 3-14 
breaks 

break command, 2-18 

guarded memory accesses, 4-10 

software breakpoints, 2-19 

write to ROM, 4-13 
bus request 

while stepping, 1-7 
BUSRQ signal, 4-11 

from target system, 3-12 

C caution statements 

real-time dependent target system circuitry, 4-4 
software breakpoint cmds. while running user code, 2-19 
cautions 

installing the target system probe, 3-9 
characterization of memory, 4-9 
Clearing software breakpoints, 2-23 
compiling the demo program, 2-3 
compress mode,trace display, 2-28 
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configuration 

for running example program, 2-4 
configuration option 

enable watch dog timer, 4-11 
configuration options 

accept BUSRQ, 4-11 

accept interrupts, 4-12 

break processor on write to ROM, 4-13 

emulation analyzer speed, 4-14 

honor target reset, 4-11 

target memory access, 4-12 

trace monitor/user program operation, 4-14 
coordinated measurements, 4-15, 5-20 

D data address 

trace, 5-17 
data bus 

trace, 5-17 
demo program 

description, 2-2 
demo target board 

installing, 3-7 
device table file, 2-3 
display command 

memory mnemonic, 2-13 

memory mnemonic with symbols, 2-14 

registers, 2-23 

software breakpoints, 2-21 

symbols, 2-10 

with source code, 2-15 
DMA 

external, 4-10 

E emul700, command to enter the Softkey Interface, 2-3, 2-31 
emulation analyzer, 1-5 
emulation analyzer speed, 4-14 
emulation configuration 

emulation analyzer speed, 4-14 
emulation memory 

burst fetch, 1-8 

installing, 3-5 

loading absolute files, 2-8 
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note on target accesses, 4-10 

RAM and ROM characterization, 4-9 

single chip mode, 1-8 

size of, 4-9 
emulation monitor, 1-5 
emulation probe 

installing, 3-9 
emulation probe cable 

installing, 3-2 
emulator 

before using, 2-2 

configuration, 4-1 

configure the emulator for example, 2-4 
device table file, 2-3 
feature list, 1-3 
prerequisites, 2-2 
purpose of, 1-1 
supported, 1-3 
emulator configuration 

break processor on write to ROM, 4-13 

enable emulation VBP, 4-7 

for example, 2-4 

initial CBP value, 4-8 

loading, 4-16 

monitor base address, 4-7 

processor operation mode, 4-6 

processor type, 4-5 

restrict to real-time runs, 4-4 

saving, 4-15 

trace monitor/user program operation, 4-14 

vector base address, 4-7 
Emulator features 

emulation memory, 1-4 
enable emulation VBP 

emulator configuration, 4-7 
END assembler directive (pseudo instruction), 2-16 
end command, 2-31, 4-15 
evaluation chip, 1-8 
execute address 

trace, 5-18 
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execution state, 2-29 

exit, Softkey Interface, 2-31 

F file extensions 

.EA and .EB, configuration files, 4-15 

G getting started, 2-1 
global symbols, 2-13 

displaying, 2-10 
guarded memory accesses, 4-10 

H hardware breakpoints, 5-15 
help 

on-line, 2-6 

pod command information, 2-7 
softkey driven information, 2-6 

I in-circuit emulation, 3-1 
initial CBP value 

emulator configuration, 4-8 
installation, 2-2 

software, 2-2 
interactive measurements, 4-15 
interrupt 

during monitor, 1-7 

from target system, 1-7, 3-12 

while stepping, 1-7 

L linkers, 4-10 

linking the demo program, 2-3 

load map, 4-10 

loading absolute files, 2-8 

loading emulator configurations, 4-16 

local symbols 

displaying, 2-11 
locked, end command option, 2-31 

M mapping memory, 4-9 
memory 

characterization, 4-9 

mapping, 4-9 

mnemonic display, 2-13 

mnemonic display with symbols, 2-14 
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modifying, 2-17 

searching for strings or expressions, 5-19 

with source code, 2-15 
mnemonic memory display, 2-13 
modify command 

configuration, 4-1 

memory, 2-17 

software breakpoints clear, 2-23 

software breakpoints set, 2-20 
monitor 

breaking into, 2-18 

selecting processor type, 4-5 
monitor base address 

emulator configuration, 4-7 
monitor cycles 

tracing, 4-14 

N no fetch cycle in trace display, 2-29 
nosymbols, 2-10 
note 

pod command from keyboard, 2-7 
status line error, 2-9 
notes 

pod commands that should not be executed, 5-19 
software breakpoints not allowed in target ROM, 2-19 
software breakpoints only at opcode addresses, 2-19 
target accesses to emulation memory, 4-10 
write to ROM analyzer status, 4-14 

O on-line help, 2-6 
option 

displaying trace, 2-30 

P PATH, HP-UX environment variable, 2-3 
Pin guard 

target system probe, 3-9 
pod_command, 2-7 

features available with, 5-19 

help information, 2-7 
prerequisites for using the emulator, 2-2 
processor operation mode 

emulator configuration, 4-6 
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R RAM, mapping emulation or target, 4-10 
real-time execution 

restricting the emulator to, 4-4 
regiser bank 

breaking into the monitor, 1-8 
register commands, 1-5 
registers 

display/modify, 2-23 
release_system 

end command option, 2-31, 4-15 - 4-16 
relocatable files, 4-10 
reset 

during monitor, 1-7 

target system, 3-1 
reset (emulator) 

running from target reset, 2-16 
reset (reset emulator) command, 2-31 
RESET signal, 4-11 

from target system, 3-12 
restrict to real-time runs 

emulator configuration, 4-4 

permissible commands, 4-4 

target system dependency, 4-4 
ROM 

mapping emulation or target, 4-10 

writes to, 4-10 
run command, 2-16 
run from reset, 3-1 
run from target reset, 4-11 

S saving the emulator configuration, 4-15 
sequencer, analyzer, 5-19 
set 

source on inverse video, 2-25 
simulated I/O, 4-15 
softkey driven help information, 2-6 
Softkey Interface 

entering, 2-3 

exiting, 2-31 

on-line help, 2-6 
software breakpoints, 2-19 

and NMI, 2-19 
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clearing, 2-23 

displaying, 2-21 

enabling/disabling, 2-20 

setting, 2-20 
software installation, 2-2 
source line referencing, 2-25 
source lines 

displaying, 2-12 
status 

trace, 5-17 
status qualifiers, 2-30 
step command, 2-24 
string delimiters, 2-7 
symbolic 

addresses, 2-16 
symbols 

displaying, 2-10 
system overview, 2-2 

T target memory 

loading absolute files, 2-8 

RAM and ROM characterization, 4-10 
target system 

dependency on executing code, 4-4 

interface, 3-15 
Target system probe 

pin guard, 3-9 
terminal interface, 2-7 
trace 

no fetch cycle, 2-29 

simple trigger, 2-25 
trace,displaying with compress mode, 2-28 
tracing monitor operation, 4-14 
transfer address, running from, 2-16 
trigger position, 2-30 

U user (target) memory 

loading absolute files, 2-8 
user program operation, tracing, 4-14 

V vector area, 1-7, 5-15 

external bus mode, 5-15 



Index -7 



single chip mode, 5-15 
vector base address 

emulator configuration, 4-7 

W watched dog timer 

during monitor, 1-7 
window systems, 2-31 
write to ROM break, 4-13 
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